debont80/AeroFetch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 9 Wiki Activity

docs(audit): fix stale Deferred entries for metadata editing + PO-token auto-mint #10

Merged
debont80 merged 1 commits from docs/code-audit-stale-deferred into main 2026-07-02 17:10:10 -04:00
Conversation 0 Commits 1 Files Changed 1
+4 -2
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 3623418fe3 - Show all commits
CODE-AUDIT.md
+4 -2
View File
@@ -2546,8 +2546,10 @@ Security & correctness audit (2026-06-23):
- Designed app icon before v1.0 (placeholder shipped).
- Migrate JSON stores to better-sqlite3 if a user indexes many large channels.
- Metadata editing (`--parse-metadata`/`--replace-in-metadata`) — held pending a live recipe.
- PO-token WebView auto-minting — only the `--extractor-args` plumbing shipped.
- ~~Metadata editing (`--parse-metadata`/`--replace-in-metadata`)~~ — done: `--replace-in-metadata` in
`DownloadOptionsForm.tsx` (ROADMAP.md "Metadata editing before download").
- ~~PO-token WebView auto-minting~~ — done: [poToken.ts](src/main/poToken.ts) opens a hardened
BrowserWindow on the shared login session and mints the token automatically (ROADMAP.md "Reliability").
- ~~Taskbar overlay badge (needs a drawn `NativeImage`)~~ — done (W11): [badge.ts](src/main/badge.ts).
- i18n — deliberately deferred (note: UI strings are hard-coded throughout).
- Code signing — **non-goal**: no certificate will be purchased, so builds ship unsigned and the SmartScreen