sneak/pixa

1.0.0

New Issue

First tagged release. Tracks every remaining commit-sized work unit required before pixa can be tagged v1.0.0: documented-but-unimplemented behavior, security and robustness hardening, and the docs/test work needed to call the image proxy flow production-ready. Each issue carries its own definition of done.

No due date

4% Completed

P1: no global cap on concurrent image processing — unbounded memory under load

#64 opened 2026-08-09 03:43:51 +02:00 by clawbot

Expiring URLs are served with Cache-Control: max-age=31536000, immutable

#63 opened 2026-08-09 03:43:32 +02:00 by clawbot

P1: /v1/e/ encrypted URLs bypass dimension and fit-mode validation

#62 opened 2026-08-09 03:43:23 +02:00 by clawbot

P1: four config keys documented in README do not exist and now abort startup

#61 opened 2026-08-09 03:43:07 +02:00 by clawbot

P1 security: q and fit are outside the HMAC signature, allowing 500x cache/transcode amplification from one signed URL

#60 opened 2026-08-09 03:42:53 +02:00 by clawbot

script/test doesn't follow the REPO_POLICIES conditional-verbose-rerun pattern (always runs -v)

#59 opened 2026-08-09 03:00:22 +02:00 by clawbot

Migrate .golangci.yml from deprecated gomodguard to gomodguard_v2

#57 opened 2026-08-07 23:14:45 +02:00 by clawbot

Cache.Stats reads never-populated output_content/request_cache tables, so TotalItems and TotalSizeBytes are always 0

#56 opened 2026-08-07 23:13:03 +02:00 by clawbot

Refactor: split internal/imgcache into focused packages

#39 opened 2026-03-18 04:34:17 +01:00 by clawbot 5 / 6

1 2 3