| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-05-24 | 2.2 kB | |
| v1.0-beta.4 source code.tar.gz | 2026-05-24 | 8.6 MB | |
| v1.0-beta.4 source code.zip | 2026-05-24 | 8.7 MB | |
| Totals: 3 Items | 17.3 MB | 0 | |
🔒 Security Infrastructure
- Added zizmor security analysis workflow (GitHub Actions security audit)
- Added OpenSSF Scorecard for supply-chain security assessment
- Added StepSecurity Harden-Runner to 4 critical workflows (egress policy enforcement)
- Added ABOM supply chain vulnerability scanner
- Added Pwn Request GitHub Actions vulnerability scanner
- Added Dependency Review workflow
- Added CODEOWNERS for mandatory PR reviews
- Resolved 50+ code scanning alerts (impostor-commit, ref-version-mismatch, artipacked, cache-poisoning)
- Fixed all action references to use immutable commit SHAs with version comments
🤖 CI/CD Bots & Automation
- Secret Scanner: Detects leaked secrets in PRs
- Permissions Sheriff: Audits GitHub Actions permission overrides
- npm Audit Checker: Auto-creates issues for vulnerable dependencies
- AI Code Review: Automated PR review via Groq (Llama 3.3 70B)
- AI i18n Translation: Auto-translates new locale keys via Groq
- PR Stats: Posts PR statistics as comment
- PR Size Labeler: Auto-labels PRs by size
- PR Body Check: Validates PR description format
- PR Title Lint: Enforces conventional commit titles
- Branch Name Lint: Validates branch naming conventions
- Issue Labeler: Auto-labels new issues
- Lock Closed: Auto-locks resolved issues
- Welcome: Welcomes first-time contributors
- Todo Issues: Creates issues from TODO/FIXME comments
- Cross-Reference Checker: Validates internal links
- Link Checker: Detects broken URLs in PRs
- Spell Check: Spell-checks code and docs
- Prettier: Auto-formats code
- Dead CSS Finder: Detects unused CSS
- File Size Checker: Flags oversized files
- CSS Lint: Validates CSS quality
- HTML Hint: Validates HTML structure
- Console Log Checker: Detects leftover debug statements
- JS Syntax Checker: Validates JavaScript syntax
🛡️ Fork PR Protection
- Added fork PR guard to review workflow (prevents unauthorized workflow access from forks)
🐛 Bug Fixes
- Fixed RTL scroll freeze (replaced overflow-x:hidden with clip)
- Fixed various action SHA mismatches across all workflows