active 2026-03-14 → 2026-03-14 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 1 days from 2026-03-14 to 2026-03-14. Pushes: 1 total, peak 1 in a day. Pull requests: 0 total, peak 0 in a day. Issues: 6 total, peak 6 in a day. Comments: 12 total, peak 12 in a day. Stars: 0 total, peak 0 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| kapdon | 19 | 1 | 0 | 12 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#16kapdon2026-03-14 23:04[BUG-IMPORT-EXPORT-004] Addon import SSRF surface fetches arbitrary manifest URLs supplied in uploaded JSON
- Issue comment#15kapdon2026-03-14 23:04[BUG-IMPORT-EXPORT-003] Config import merges addons and group links by display name only, causing cross-linking and silent corruption for duplicate names
- Issue comment#14kapdon2026-03-14 23:04[BUG-IMPORT-EXPORT-002] Config import wipes the entire account before validating payload shape or addon fetchability
- Issue comment#12kapdon2026-03-14 23:04[BUG-PUBLIC-USER-002] Public library and profile reads enumerate default-account users across all tenants and groups
- Issue comment#6kapdon2026-03-14 23:03[BUG-SCOPE-003] Group membership mutations accept foreign `userId` values and can orphan users across accounts
- Issue comment#1kapdon2026-03-14 23:03[BUG-AUTH-SESSION-001] Private-mode auth UI can never render the direct-access branch after mount
- Issue comment#15kapdon2026-03-14 22:57[BUG-IMPORT-EXPORT-003] Config import merges addons and group links by display name only, causing cross-linking and silent corruption for duplicate names
- Issue comment#1kapdon2026-03-14 22:44[BUG-AUTH-SESSION-001] Private-mode auth UI can never render the direct-access branch after mount
- Issue#14kapdon2026-03-14 11:53[BUG-IMPORT-EXPORT-002] Config import wipes the entire account before validating payload shape or addon fetchability
- Issue#11kapdon2026-03-14 11:53[BUG-PUBLIC-USER-001] Public user mutations trust bare userId values and never verify the callers Stremio session
- Issue comment#9kapdon2026-03-14 11:52[BUG-ADDON-SYNC-003] “Clear all addons” bypasses protection and exclusion semantics entirely and can wipe protected collections outside sync flow
- Issue#5kapdon2026-03-14 11:51[BUG-SCOPE-002] `PUT /api/users/:id` leaks cross-account group membership data after updating a scoped user
- Issue#4kapdon2026-03-14 11:51[BUG-SCOPE-001] Global user and group bulk actions ignore account scope and can mutate every tenant
- Issue comment#5kapdon2026-03-14 11:51[BUG-SCOPE-002] `PUT /api/users/:id` leaks cross-account group membership data after updating a scoped user
- Issue comment#4kapdon2026-03-14 11:51[BUG-SCOPE-001] Global user and group bulk actions ignore account scope and can mutate every tenant
- Issue comment#3kapdon2026-03-14 11:51[BUG-AUTH-SESSION-003] Private auth logout leaves the app permanently hidden until a full page reload
- Issue#5kapdon2026-03-14 11:17[BUG-SCOPE-002] `PUT /api/users/:id` leaks cross-account group membership data after updating a scoped user
- Issue#3kapdon2026-03-14 11:17[BUG-AUTH-SESSION-003] Private auth logout leaves the app permanently hidden until a full page reload
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.