maximus

0 followers · 0 following

• Joined on 2026-02-23

Repositories

3

Projects Packages Public activity Starred repositories

maximus commented on pull request maximus/simpl-liste#109 2026-08-12 01:40:46 +00:00

fix(security): bump undici + js-yaml overrides to patched versions

Verdict : APPROVE

Bump de sécurité propre et complet. Les 3 versions patchées sont présentes dans le lock, sans copie vulnérable résiduelle, et cohérentes avec package.json. Fixes…

maximus created pull request maximus/simpl-liste#109 2026-08-12 00:47:57 +00:00

fix(security): bump undici + js-yaml overrides to patched versions

maximus created branch issue-106-107-deps-overrides in maximus/simpl-liste 2026-08-12 00:47:25 +00:00

maximus pushed to issue-106-107-deps-overrides at maximus/simpl-liste 2026-08-12 00:47:25 +00:00

0e4c5cdb4e fix(security): bump undici + js-yaml overrides to patched versions

maximus opened issue maximus/simpl-liste#106 2026-08-12 00:36:09 +00:00

[security] deps: vulnerability in undici (moderate)

maximus opened issue maximus/simpl-liste#107 2026-08-12 00:36:09 +00:00

[security] deps: vulnerability in js-yaml (high)

maximus opened issue maximus/simpl-liste#108 2026-08-12 00:36:09 +00:00

[security] deps: image-size DoS (high) -- bloque upstream, suivi

maximus merged pull request maximus/simpl-liste#105 2026-08-11 13:26:31 +00:00

fix(security): bump postcss + @expo/cli tar overrides to patched versions

maximus closed issue maximus/simpl-liste#102 2026-08-11 13:26:31 +00:00

[security] deps: vulnerability in postcss (high)

maximus closed issue maximus/simpl-liste#104 2026-08-11 13:26:31 +00:00

[security] deps: vulnerability in tar (moderate)

maximus pushed to master at maximus/simpl-liste 2026-08-11 13:26:31 +00:00

2da7c0d67d Merge pull request 'fix(security): bump postcss + @expo/cli tar overrides to patched versions' (#105) from issue-102-104-deps-overrides into master

9eaa103a87 fix(security): bump postcss + @expo/cli tar overrides to patched versions

Compare 2 commits »

maximus deleted branch issue-102-104-deps-overrides from maximus/simpl-liste 2026-08-11 13:26:31 +00:00

maximus commented on pull request maximus/simpl-liste#105 2026-08-11 13:25:40 +00:00

fix(security): bump postcss + @expo/cli tar overrides to patched versions

Review /pr-review — APPROVE

Verdict : APPROVE

Bump de securite propre et bien delimite. Les deux overrides atteignent leur cible, le lock est pleinement coherent (aucune copie…

maximus created pull request maximus/simpl-liste#105 2026-08-10 12:29:32 +00:00

fix(security): bump postcss + @expo/cli tar overrides to patched versions

maximus created branch issue-102-104-deps-overrides in maximus/simpl-liste 2026-08-10 12:28:50 +00:00

maximus pushed to issue-102-104-deps-overrides at maximus/simpl-liste 2026-08-10 12:28:50 +00:00

9eaa103a87 fix(security): bump postcss + @expo/cli tar overrides to patched versions

maximus closed issue maximus/simpl-liste#103 2026-08-10 12:22:26 +00:00

[security] deps: vulnerability in brace-expansion (high)

maximus commented on issue maximus/simpl-liste#102 2026-08-10 12:22:25 +00:00

[security] deps: vulnerability in postcss (high)

Analyse (/analyze)

Impact vérifié par exploration du codebase. Verdict : bump de borne, sans effet de bord.

• Fichiers : package.json (bloc overrides) + package-lock.json.…

maximus commented on issue maximus/simpl-liste#104 2026-08-10 12:22:25 +00:00

[security] deps: vulnerability in tar (moderate)

Analyse (/analyze)

Impact vérifié par exploration du codebase. Verdict : bump de borne, sans effet de bord.

• Fichiers : package.json (override scopé @expo/cli.tar) +…

maximus commented on issue maximus/simpl-liste#103 2026-08-10 12:22:25 +00:00

[security] deps: vulnerability in brace-expansion (high)

Analyse (/analyze) — accepté comme non corrigeable in-place

Exploration des sites d'appel réels : l'override blanket brace-expansion: ^5.0.8 est cassant, et aucun fix ne met `npm…