Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

Security audit status

Abierto
  • ¿Algo no está bien?
#1,137 16 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
5/100
Tipo de issue
Documentación
Claridad
Necesita aclaración
Estado de actividad
Activo
Área
security

Línea de trabajo

This is a status report that the nightly audit rewrites on every run, not a task with code to change. Its open finding is kept private until it is fixed or disclosed, so there is nothing here to start from. Vulnerabilities should go through the private advisory form linked in the issue, never a public issue, and the checks are described at dormouse.sh/security.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

security-audit-status

Latest run

FAIL — the audit failed.

Run at 2026-10-18T09:02Z · run · audited commit 24c432c

Domain Verdict Failed checks Rules with no result Malformed lines BLOCKER WARNING
audit-supply-chain.md PASS 0 0 0 0 0
audit-ci-secrets.md PASS 0 0 0 0 0
audit-remote.md PASS 0 0 0 0 0
audit-local.md FAIL 2 0 0 0 0
audit-hosted.md PASS 0 0 0 0 0
audit-github-state.md PASS 0 0 0 0 0

Failed FAIL IF sections:

  • docs/specs/security-local.md -> "Persisted state"
  • docs/specs/security-local.md -> "Spawned programs"

Open findings

4 findings are open in the private ledger. Each is published when it is fixed, or on its disclosure date, whichever comes first.

Key Severity Kind Filed Disclosure
8fc007a19793 WARNING finding 2026-10-17 2026-10-24
bdf569e1b57f WARNING finding 2026-10-17 2026-10-24
357702161430 FAIL failed check 2026-10-18 2026-10-25
e44e1e30260e FAIL failed check 2026-10-18 2026-10-25

Disclosed

  • #1159 — 419e523e88ae, FAIL failed check, disclosed 2026-10-17
  • #1158 — f8af92924184, WARNING finding, disclosed 2026-10-17
  • #1153 — f268230b74a4, WARNING finding, disclosed 2026-10-17
  • #1152 — 4a462769d083, FAIL failed check, disclosed 2026-10-17
  • #1142 — 4276803722f2, FAIL failed check, disclosed 2026-10-16
  • #1136 — manual-osc367-gate, FAIL failed check, disclosed 2026-10-16
  • #1135 — manual-webview-form-action, FAIL failed check, disclosed 2026-10-16
  • #1134 — manual-baked-relay-define, WARNING finding, disclosed 2026-10-16
  • #1133 — manual-one-time-room-store, WARNING finding, disclosed 2026-10-16
  • #1132 — 9f42a885466c, WARNING finding, disclosed 2026-10-16

Every disclosed finding: security-audit-finding.

Every run of the nightly security audit rewrites this issue. What the audit checks, and how: dormouse.sh/security (source). Finding detail stays private until the finding is fixed, or 7 days after it is filed, whichever comes first; then it is published under security-audit-finding. Subscribe to be notified when the outcome changes or a finding is disclosed. To report a vulnerability, use the private advisory form, never an issue.

Lenguaje dominante
TypeScript
Estrellas
5
Forks
1
Merge medio
12 h 30 min
PR fusionados (30 d)
381

Preparar el entorno

Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de diffplug/dormouse

Todos los issues de diffplug/dormouse

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.