Skip to content

Fix high-impact Bundlephobia audit issues#1015

Merged
pastelsky merged 13 commits into
bundlephobiafrom
codex/bundlephobia-audit-fixes
Jul 19, 2026
Merged

Fix high-impact Bundlephobia audit issues#1015
pastelsky merged 13 commits into
bundlephobiafrom
codex/bundlephobia-audit-fixes

Conversation

@pastelsky

@pastelsky pastelsky commented Jul 19, 2026

Copy link
Copy Markdown
Owner

Summary

  • prevent stale package search responses from overwriting current results
  • make scan results and global navigation usable on mobile
  • preserve scan selections, reject empty scans, and explain skipped dependencies
  • sanitize build error markup and improve icon/control accessibility
  • replace deprecated progress lifecycle and statically optimize /scan
  • upgrade Axios and Koa to patched releases

Verification

  • yarn build passes; /scan is static and /scan-results remains SSR due legacy query initialization
  • TypeScript check passes
  • React Doctor final pass: 84 warnings, 0 errors across 36 files (down from 92 diagnostics, including 3 errors)
  • Jest requires the local API fixture server; without it, 7 integration tests fail with ECONNREFUSED and 8 tests pass

Follow-ups

  • Next.js major-line upgrade, react-autocomplete migration, /scan-results static query refactor, and existing font/Sentry warnings remain separate compatibility work.

Comment thread issues.md Outdated

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove this file

Comment thread package.json Outdated
"jsdom": "^24.0.0",
"jsonstream": "^1.0.3",
"koa": "^2.15.0",
"koa": "^2.16.4",

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do not do these upgrades in this pr

@pastelsky
pastelsky merged commit dc41c7f into bundlephobia Jul 19, 2026
2 checks passed
@pastelsky
pastelsky deleted the codex/bundlephobia-audit-fixes branch July 19, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant