2026-04-19T15:58:23Z - 2026-10-19T15:58:23Z
Overview
5 releases published by 1 user
Published
v1.6.6
v1.6.6
Published
v1.6.5
v1.6.5
Published
v1.6.4
v1.6.4
Published
v1.6.3
v1.6.3
Published
v1.6.2
v1.6.2 - security
24 pull requests merged by 1 user
Merged
#138 fix(security): raise shell-quote, add compression and source-map-js floors
Merged
#132 state: sync after #128, #129 (PR #131), #126 and #130
Merged
#131 fix(security): add http-cache-semantics and postcss-selector-parser floors
Merged
#127 fix(security): raise brace-expansion and undici override floors
Merged
#122 fix(security): raise @xmldom/xmldom and js-yaml override floors
Merged
#119 fix(security): bump @react-navigation/core to 7.22.1 via override
Merged
#116 fix(security): raise browserslist floor to 4.28.7 via override
Merged
#114 fix(security): drop image-size via metro 0.83.8 overrides
Merged
#111 fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
Merged
#109 fix(security): bump undici + js-yaml overrides to patched versions
Merged
#105 fix(security): bump postcss + @expo/cli tar overrides to patched versions
Merged
#101 feat(feedback): integrate Feedback Hub widget in Settings
Merged
#100 fix(security): override 5 transitive dep vulnerabilities from npm audit
Merged
#94 fix(security): override @expo/cli ws to ^8.20.1 (GHSA-58qx-3vcg-4xpx) (#92)
Merged
#93 chore(web): document set-state-in-effect on ThemeToggle localStorage read (#90)
Merged
#91 chore(web): fix prefer-const and remove unused import
Merged
#89 fix(web): resolve display name from userInfo, not just claims (#70)
Merged
#88 chore(deps): align Expo SDK 54 patches
Merged
#84 test(smoke): add non-regression smoke for uuid + package overrides
Merged
#80 fix(security): override postcss to ^8.5.10
Merged
#79 verify(security): seed STATE+SECURITY + defenseur rescan (#76)
Merged
#78 fix(security): override uuid to ^11.0.0 (#75)
Merged
#77 fix(security): override @xmldom/xmldom to ^0.8.13 (#74)
Merged
#73 fix: render-optimiste + timing for widget toggle handlers (#71)
38 issues closed from 2 users
Closed
#133 [security] deps: vulnerability in shell-quote (critical)
Closed
#134 [security] deps: vulnerability in compression (high)
Closed
#135 [security] deps: vulnerability in source-map-js (high)
Closed
#128 [security] deps: vulnerability in http-cache-semantics (high)
Closed
#129 [security] deps: vulnerability in postcss-selector-parser (low)
Closed
#126 [security] deps: decode-uri-component 0.5.0 publiee, re-tester l'acceptation de #120 (moderate)
Closed
#124 [security] deps: vulnerability in brace-expansion (high)
Closed
#125 [security] deps: vulnerability in undici (high)
Closed
#120 [Sécurité] decode-uri-component <=0.4.2 via expo-router -> query-string@7 (inatteignable, risque accepté)
Closed
#121 [security] deps: @xmldom/xmldom 0.8.15 + js-yaml 3.15.2/4.3.2 (high)
Closed
#117 [Sécurité] Vuln modérée dans @react-navigation/core
Closed
#115 [security] deps: browserslist OOM + prototype write (high) -- corrigeable, 4.28.7
Closed
#108 [security] deps: image-size DoS (high) -- bloque upstream, suivi
Closed
#112 HIGH: @react-native/community-cli-plugin — vulnérabilité image-size (metro)
Closed
#103 [security] deps: vulnerability in brace-expansion (high)
Closed
#110 [security] deps: vulnerability in @babel/core (low)
Closed
#106 [security] deps: vulnerability in undici (moderate)
Closed
#107 [security] deps: vulnerability in js-yaml (high)
Closed
#102 [security] deps: vulnerability in postcss (high)
Closed
#104 [security] deps: vulnerability in tar (moderate)
Closed
#68 Intégrer widget feedback (Feedback Hub)
Closed
#96 [security] deps: vulnerability in undici (high)
Closed
#97 [security] deps: vulnerability in ws (high)
Closed
#98 [security] deps: vulnerability in js-yaml (moderate)
Closed
#99 [security] deps: vulnerability in tar (moderate)
Closed
#95 [security] deps: vulnerability in shell-quote (critical)
Closed
#92 [security] deps: vulnerability in ws (medium)
Closed
#90 ThemeToggle: lint react-hooks/set-state-in-effect (hydratation localStorage)
Closed
#70 Harmoniser le display name avec la vitrine (userInfo au lieu de claims)
Closed
#87 Aligner 7 patches Expo SDK 54 (expo-doctor)
Closed
#81 Vulnerabilites npm SDK Expo + uuid + xcode (18 packages, update lockstep Expo)
Closed
#85 Vuln GHSA-w5hq-g745-h8pq sur uuid <10.0.0
Closed
#82 Vuln GHSA-w5hq-g745-h8pq sur uuid <14.0.0
Closed
#76 Verification: defenseur 0 finding + build EAS preview + docs securite
Closed
#75 Fix MEDIUM: override uuid pour corriger buffer bounds check
Closed
#74 Fix HIGH: override @xmldom/xmldom pour corriger 4 CVE
Closed
#72 afficher la version web a partir du site vitrine
Closed
#71 widget - afficher sous-taches est tres lents
4 issues created by 1 user
Opened
#123 [security] deps: node-forge RSA PKCS#1 v1.5 (high) -- bloque upstream, suivi
Opened
#130 [security] deps: vulnerability in braces (high) -- plancher, suivi
Opened
#136 [security] deps: vulnerability in postcss-selector-parser GHSA-rj75 (moderate) -- plancher, suivi
Opened
#137 [security] deps: vulnerability in sprintf-js (moderate) -- plancher, suivi