Issues 28 open · 331 closed

● #221 Security (medium): no login throttling featuresecurity

opened 20 days ago by andymccall

● #220 Security (medium): webhook responses have no size limit bugsecurity

opened 20 days ago by andymccall

● #219 Security (high): SSRF through webhook and assistant URLs bugsecurity

opened 20 days ago by andymccall

● #218 Security (critical): plain HTTP served without redirecting to HTTPS bugsecurity

opened 20 days ago by andymccall · 1 comment

● #217 Profile: the year as a signal (contribution pulse) featureui

opened 20 days ago by andymccall

● #216 Proposal changes list: state addresses in Diffusion bump titles run off the page bugui

opened 20 days ago by andymccall

● #215 Code button: show the Git clone command when the Git mirror is on featureui

opened 20 days ago by andymccall

● #214 Use an invitation to sign up with GitHub, GitLab or Google featuregap

opened 20 days ago by andymccall

● #213 Sign in with GitLab (gitlab.com and self-managed), and branded sign-in buttons featureui

opened 20 days ago by andymccall

● #212 Prometheus metrics: /metrics on the hub (and runners)

opened 20 days ago by andymccall · 1 comment

● #211 Run the hub on PostgreSQL as well as SQLite

opened 20 days ago by andymccall · 2 comments

● #210 Diffusion: a landing does not refresh the consumer's pin index in production, so it shows behind with no bump

opened 20 days ago by andymccall · 1 comment

● #207 Live L5: issues, Diffusion tab and overview live

opened 21 days ago by andymccall

● #206 Live L4: dashboard and inbox live

opened 21 days ago by andymccall

● #205 Live L3: the proposal page updates itself

opened 21 days ago by andymccall

● #204 Live L2: /live stream and the hub.js client

opened 21 days ago by andymccall

● #203 Live L1: event bus inside the hub

opened 21 days ago by andymccall

● #202 Live pages: the design (docs/live.md)

opened 21 days ago by andymccall

● #201 Assistants: 'the answer carried no text' when a thinking model spends max_tokens

opened 21 days ago by andymccall

● #200 .oxymodules: a watch list spread over several lines is cut to its first line

opened 21 days ago by andymccall

● #199 Diffusion roadmap: honest status, ecosystems, OSV alerts

opened 21 days ago by andymccall

● #198 Long hashes and state addresses run off the overview

opened 21 days ago by andymccall

● #197 A landed proposal starts no Flow run on its target

opened 21 days ago by andymccall

● #196 Backdrops on the pages touched in the polish batch

opened 21 days ago by andymccall

● #195 Conflicts page is full width

opened 21 days ago by andymccall