Issues

• Design decisions needed before implementing #102 (hidden/readOnly semantics, datetime timezone model, partial-save behaviour, introspection failure mode)

  bugquestion
  smallhoursorg/hotsauce#108 · Filter by author earthlingdavey opened on Sep 25, 2026

• Low-severity hardening backlog from full-project review (auth, plugins, apps, CI, versions)

  enhancementsecurity
  smallhoursorg/hotsauce#107 · Filter by author earthlingdavey opened on Sep 25, 2026

• Storage/Puck correctness: SigV4 query ordering, virtual-hosted CSP, Puck route column gate, replayable fs token, Puck JSR type deps

  bug
  smallhoursorg/hotsauce#106 · Filter by author earthlingdavey opened on Sep 25, 2026

• Plugin/worker lifecycle: unawaited onAction crashes process, swallowed rejections, init poisoning, serializable false-positives, error-boundary gaps

  bug
  smallhoursorg/hotsauce#105 · Filter by author earthlingdavey opened on Sep 25, 2026

• Security: CSRF session binding, beforeSave overwrite, policy merge, unbounded form bodies, storage accept default, www/demo XSS surfaces

  bugsecurity
  smallhoursorg/hotsauce#104 · Filter by author earthlingdavey opened on Sep 25, 2026

• Data integrity bugs from full-project review: form round-trip, M2M keys, column-name vs property-name, introspection

  bug
  smallhoursorg/hotsauce#102 · Filter by author earthlingdavey opened on Sep 25, 2026
  2

• docs: deployment footprint — how to bundle/compile, and the --parallel / DENO_JOBS trade-offs

  documentation
  smallhoursorg/hotsauce#99 · Filter by author earthlingdavey opened on Sep 5, 2026

• Support signed CDN download URLs (per-object, with expiry) for storage plugins

  enhancementsecurity
  smallhoursorg/hotsauce#91 · Filter by author earthlingdavey opened on Jul 4, 2026

• test:npm dnt build fails on cold cache: "failed reading cache entry" for @std/media-types meta.json (Deno 2.9.0)

  agent:exploredbughuman:question
  smallhoursorg/hotsauce#86 · Filter by author earthlingdavey opened on Jun 27, 2026
  1

• NPM Publish Workflow

  agent:exploredhuman:question
  smallhoursorg/hotsauce#78 · Filter by author earthlingdavey opened on Jun 25, 2026
  1

• Consider granular filter actions for renderField hook (list/update vs read)

  enhancement
  smallhoursorg/hotsauce#69 · Filter by author earthlingdavey opened on Jun 21, 2026

• Add STS session-token support (X-Amz-Security-Token) to S3 signing

  enhancement
  smallhoursorg/hotsauce#44 · Filter by author earthlingdavey opened on Mar 28, 2026

• fileUrl allows redirects to any http/https host (phishing surface)

  agent:exploredenhancementhuman:questionsecurity
  smallhoursorg/hotsauce#40 · Filter by author earthlingdavey opened on Mar 22, 2026
  1

• Security Review: File Upload / File Serving PR

  agent:exploredhuman:question
  smallhoursorg/hotsauce#17 · Filter by author earthlingdavey opened on Jan 28, 2026
  1

• Plugin System: Remaining peer review findings

  smallhoursorg/hotsauce#4 · Filter by author earthlingdavey opened on Jan 22, 2026
  1