Hermes Memory Installer Update: CDN Security Enhancement

Short summary

The hermes-memory-installer package updated its CDN delivery with a sec_s2_1 endpoint adding X.509 signature verification for remotely fetched memory profiles in Hermes-optimized React Native apps. Memory profiles are packaged as PNG files for CDN optimization with timestamp-based versioning for cache invalidation. The update includes runtime safety checks, fallback to last-known-safe config, and a CLI tool for signing and packaging profiles.

• •sec_s2_1 endpoint enforces X.509 signature verification on all CDN-delivered memory profiles, preventing malicious substitution
• •Profiles packaged as PNG blobs with timestamp-based IDs for deterministic cache invalidation across releases
• •Runtime safety rejects profiles exceeding device-safe boundaries; installer falls back to local config on verification failure

Generated with AI, which can make mistakes.