What measures are taken to ensure code security from the perspective of package management?

• Compilation: During compilation, both HARs and HSPs support code obfuscation.
• Packaging: HSPs and HAPs are individually signed during packaging, and only signed applications are allowed to be installed.
• Installation: AppGallery on devices is used for the installation and uninstall of applications. No other installation methods are supported.
• Runtime: The application sandbox mechanism is provided as a security isolation technique to prevent data from being accessed through malicious path traversal.

Reference

Using Obfuscation for Code Hardening, Application Package Structure in Stage Model, Application Installation, Uninstall, and Update, Application Sandbox.