Closed

Divanyx's TPM-backed Omapasskey submission was published and closed. In omacom/omarchy-plugin-marketplace#13302:issuecomment-6602986228, Divanyx reported that version 1.2.2 escapes untrusted terminal control characters in account and device names, including already stored names, with regression tests.

HANCORE-linux then confirmed the previously reported findings were resolved at the reviewed commit and accepted the explicit setup of its dedicated system service. github-actions[bot] recorded publication in omacom/omarchy-plugin-marketplace#13302:issuecomment-6614926435. Users still need native service installation and PIN setup; verification applies to the exact marketplace snapshot and is not a security audit.