All issues

Search results

Security scans miss nested manifests — submodule vulnerabilities are structurally invisible

Status: Open.

#145 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 15, 2026

Override-audit cache is TTL-only, so an explicit rescan replays stale results for up to an hour

Status: Open.

#144 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 15, 2026

clean-slate lockfile resolution destroys project state with no rollback on failure

bugSomething isn't workingSomething isn't working

Status: Open.

#143 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 15, 2026

Installs inherit only the server env — projects needing GITHUB_TOKEN cannot be patched

bugSomething isn't workingSomething isn't working

Status: Open.

#142 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 15, 2026

Remediation dialog hides the real lockfile-resolution error

bugSomething isn't workingSomething isn't working

Status: Open.

#141 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 15, 2026

Security scan reports "no output" for three different conditions, only one of which is a failure

bugSomething isn't workingSomething isn't working

Status: Open.

#140 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 11, 2026

override-remove reports success when the dev-server guard blocked the operation

Status: Open.

#139 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 11, 2026

SIGINT/SIGTERM shutdown handler silently stops reaping after an HMR reload

Status: Open.

#138 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 11, 2026

Stop can still orphan a server that traps SIGTERM (residual of #90)

Status: Open.

#137 In Hexaxia-Labs/hexops;

· alamb-hex opened on Aug 11, 2026

Outdated-package sweep applies major-version bumps in bulk 'chore(deps)' commits, no build verification — broke 24 fleet projects (typescript 6→7)

Status: Open.

#131 In Hexaxia-Labs/hexops;

· alamb-hex opened on Jul 13, 2026

Patch scanner: pnpm outdated silently under-reports when a private scoped dep 404s (missing auth)

Status: Open.

#130 In Hexaxia-Labs/hexops;

· alamb-hex opened on Jul 3, 2026

Remediation footgun: bare >= range overrides can silently resolve out-of-range under pnpm node-linker=hoisted

Status: Open.

#126 In Hexaxia-Labs/hexops;

· alamb-hex opened on Jun 18, 2026