[sh1pt-actions-fleet]

Replace this property’s custom footer with the shared @profullstack/footer integration and keep it following the published @latest template.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​profullstack/​footer@​0.4.0 ⏵ 0.6.10	+9		+1	+1

View full report

[github-actions]

ThreatCrush Security Scan

15 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 11 | LOW: 2

Severity	Rule	Location
HIGH	js-ssrf-outbound-request	public/sw.js:21
HIGH	js-ssrf-outbound-request	src/lib/edgeProxy.ts:69
MEDIUM	js-unescaped-html-sink	src/components/JsonLd.tsx:13
MEDIUM	redos-nested-quantifier	src/lib/emailMarkdown.ts:43
MEDIUM	redos-nested-quantifier	src/lib/emailMarkdown.ts:302
MEDIUM	js-unescaped-html-sink	src/views/Admin.tsx:1811
MEDIUM	js-unescaped-html-sink	src/views/BlogPost.tsx:168
MEDIUM	js-unescaped-html-sink	src/views/EmailBroadcast.tsx:412
MEDIUM	js-open-redirect	src/views/Featured.tsx:279
MEDIUM	js-unescaped-html-sink	src/views/NewsPost.tsx:137
MEDIUM	js-open-redirect	src/views/SoftwareDetail.tsx:160
MEDIUM	redos-nested-quantifier	supabase/functions/_shared/emailMarkdown.ts:43
MEDIUM	redos-nested-quantifier	supabase/functions/_shared/emailMarkdown.ts:302
LOW	secret-generic-credential	__tests__/lib/webhooks/supabaseStore.test.ts:11
LOW	secret-generic-credential	cli/test/cli.test.mjs:309

Snippets are redacted; ThreatCrush never prints matched credential material.