2025-08-30 - 2026-08-30
Overview
10 Pull requests merged by 2 users
Merged
#51 fix(frontend): meet the 44x44 minimum tap target on every control (closes #43)
Merged
#50 fix: wrap per-host status line so 320px viewport does not scroll (closes #42)
Merged
#40 build: Dockerfile.backend multistage lint stage (closes #17)
Merged
#35 chore: root .editorconfig and hardened .gitignore (closes #15)
Merged
#12 frontend: gate the Docker build on make check (closes #11)
Merged
#10 scripts-to-rule-them-all
Merged
#9 TODO
Merged
#5 feat: responsive mobile layout for host rows (closes #2)
Merged
#3 fix: show 'not available on mobile' message instead of broken layout
Merged
#1 add backend in advance of sending report data
4 Pull requests proposed by 1 user
Proposed
#31 WIP: lint: adopt org-standard .golangci.yml and golangci-lint v2.12.2 (closes #14)
Proposed
#38 WIP: build: unify the gate so root make check covers the backend (closes #16)
Proposed
#44 WIP: test: automated responsive-layout harness (closes #13)
Proposed
#49 1.0.0 milestone: repo compliance, unified check gate, mobile layout QA
8 Issues closed from 2 users
Closed
#48 TOP PRIORITY: consolidate all open PRs onto one next branch, one PR
Closed
#43 Mobile: every interactive control is below the 44x44 minimum tap target
Closed
#42 Mobile: per-host status line forces horizontal page scroll at 320px
Closed
#17 Rework Dockerfile.backend to the mandated Go multistage lint-stage pattern
Closed
#15 Dotfile compliance: add root .editorconfig, harden .gitignore, exclude .git from .dockerignore
Closed
#4 Add mobile detection: show "Not yet available on mobile" message
Closed
#11 Frontend Dockerfile CI build does not run make check (only yarn build)
Closed
#2 broken on mobile
34 Issues created by 1 user
Opened
#2 broken on mobile
Opened
#4 Add mobile detection: show "Not yet available on mobile" message
Opened
#11 Frontend Dockerfile CI build does not run make check (only yarn build)
Opened
#13 QA: test responsive mobile layout on real devices
Opened
#14 Adopt the org-standard .golangci.yml and golangci-lint v2.12.2
Opened
#15 Dotfile compliance: add root .editorconfig, harden .gitignore, exclude .git from .dockerignore
Opened
#16 Unify the gate: root make check must cover the backend, and CI must route through script/
Opened
#17 Rework Dockerfile.backend to the mandated Go multistage lint-stage pattern
Opened
#18 Frontend image serves zero security headers; add the full REPO_POLICIES set to nginx.conf
Opened
#19 Backend hardening: missing IdleTimeout/ReadHeaderTimeout, no security headers, no trusted-proxy client IP
Opened
#20 POST /api/v1/reports is unauthenticated, wildcard-CORS, and unrated-limited
Opened
#21 make test is effectively a no-op: Go tests are compile stubs, frontend has no test framework
Opened
#22 Shutdown is broken: os.Exit races fx OnStop hooks, losing buffered reports on every restart
Opened
#23 Report ingest correctness: returns 200 on storage failure, 400 on oversize, logs untrusted body
Opened
#24 README.md and TODO.md are substantially inaccurate — 14 documented claims contradict the code
Opened
#25 Decision needed: the backend is not connected to anything — does it ship in 1.0?
Opened
#26 nginx: PORT env override is documented but does not exist; add it and server_tokens off
Opened
#27 Backend observability: fx logs bypass slog, Identify() is dead, Sentry/Prometheus config is parsed but unwired
Opened
#28 script/ and Makefile drift from the org models; make dev is not a shim, make build is missing
Opened
#29 src/main.js: 1262-line monolith with innerHTML injection sinks, unfrozen CONFIG, and duplicated logic
Opened
#30 Decision needed: repo layout does not match the canonical structure, and backend/ duplicates 7 repo-level files
Opened
#32 Node deprecation warning DEP0205 emitted on every frontend build
Opened
#33 make hooks and make docker both fail when run from a git worktree
Opened
#34 golangci config drift guard: failure message loops the operator when the org standard legitimately updates
Opened
#36 Exclude .git from .dockerignore once the builds no longer read git metadata
Opened
#37 CI can report a green it did not earn: script/cibuild serves make check from the Docker layer cache
Opened
#39 Follow-ups from PR #38: bootstrap re-extract guard, message attribution, and the #31 rebase reconciliation
Opened
#41 golangci-lint v2.12.2 deprecates the gomodguard linter; migrate to gomodguard_v2
Opened
#42 Mobile: per-host status line forces horizontal page scroll at 320px
Opened
#43 Mobile: every interactive control is below the 44x44 minimum tap target
Opened
#45 No sanctioned way to add a dependency: script/bootstrap is --frozen-lockfile and nothing updates the lockfile
Opened
#46 Viewport harness: derive .pin-btn presence floor from rowCount, and correct two overclaiming statements
Opened
#47 Run all linting in Docker via Dockerfile.lint + script/lint
Opened
#48 TOP PRIORITY: consolidate all open PRs onto one next branch, one PR