mirror of https://github.com/millionco/react-doctor.git synced 2026-09-14 20:00:24 +08:00

Files

T

History

Skosh 72a4f4684c fix(ci): prevent pull request cache writes (#1688 )

* fix(ci): harden workflows against cache poisoning and document unsigned tags

- Restrict TURBO_TOKEN/TURBO_TEAM to main-branch pushes only across
  ci.yml, code-quality.yml, and react-doctor.yml. First-party PR branches
  no longer have cache write access (preventing cache poisoning attacks).
  PRs run with a cold cache.

- Add SECURITY comments in action-version-bump.yml explaining that tags
  are unsigned and recommending SHA pinning for hardened CI.

- Update install-github-workflow.ts template to include security note
  about @v2 floating major tag and SHA pinning recommendation.

Closes #1685

Co-authored-by: Skosh <skoshx@users.noreply.github.com>

* fix(ci): make pull request cache read-only

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Skosh <skoshx@users.noreply.github.com>
Co-authored-by: Aiden Bai <aiden@million.dev>

2026-08-29 22:53:52 -07:00

add-bippy-dependency.md

chore: add bippy dependency

2026-08-15 00:11:03 +00:00

bump-oxc-toolchain.md

chore: upgrade Oxc toolchain (#1651 )

2026-08-13 23:31:27 -07:00

calm-compilers-rest.md

fix: honor React Compiler in ESLint presets (#1652 )

2026-08-14 15:42:59 -07:00

config.json

feat: make React cleanup first-class (#1624 )

2026-08-13 16:26:08 -07:00

dependency-hygiene-1686.md

fix(deps): remove shameful hoisting (#1689 )

2026-08-27 17:20:49 -07:00

few-berries-drum.md

fix: scan standalone Three.js projects and preserve TUI layout (#1646 )

2026-08-13 18:18:45 -07:00

fix-action-json-report.md

fix(action): clean npm output from JSON reports (#1714 )

2026-08-29 21:16:01 -07:00

fix-ci-recommendation-monorepo.md

fix(cli): check root workflow before recommending CI (#1697 )

2026-08-29 22:21:32 -07:00

fix-expo-config-plugins.md

fix(core): resolve typed Expo config plugins (#1713 )

2026-08-29 19:04:42 -07:00

fix-expo-metro-config-wrappers.md

fix(core): resolve local Expo Metro config wrappers (#1718 )

2026-08-29 21:50:56 -07:00

fix-function-resolution-stack-overflow.md

fix: prevent stack overflow in function resolution with depth limiting (#1658 )

2026-08-21 18:55:21 -07:00

fix-implicit-subproject-entries.md

fix: extract entry points from implicit sub-projects outside workspace patterns (#1666 )

2026-08-21 18:55:41 -07:00

fix-member-hook-state-consumption.md

fix(rules): recognize member hook state consumption (#1717 )

2026-08-29 22:13:41 -07:00

fix-npm-cache-corruption-error.md

fix(cli): explain incomplete npx installs (#1693 )

2026-08-27 17:55:02 -07:00

fix-recent-rule-false-positives.md

fix(rule): avoid false positives in common patterns (#1706 )

2026-08-29 03:48:45 -07:00

fix-scope-changed-remote-base.md

fix(core): compare changed scope against remote default (#1676 )

2026-08-25 12:17:47 -07:00

fix-type-only-window.md

fix: ignore TypeScript type-only positions in no-unguarded-browser-global-at-module-scope (#1668 )

2026-08-21 18:56:00 -07:00

fruity-wombats-teach.md

fix(rule): preserve Fast Refresh coverage in nested checkouts (#1673 )

2026-08-24 15:19:43 -07:00

harden-react-doctor-ci.md

fix(ci): prevent pull request cache writes (#1688 )

2026-08-29 22:53:52 -07:00

honest-flatmap-advice.md

fix(rule): correct flatMap performance advice (#1671 )

2026-08-23 02:18:53 -07:00

polite-monkeys-laugh.md

perf: profile and optimize rule execution (#1663 )

2026-08-20 22:05:20 -07:00

quiet-agent-stop-hooks.md

fix(cli): run agent hooks at turn completion (#1650 )

2026-08-13 17:08:53 -07:00

react-cleanup-engine.md

feat: make React cleanup first-class (#1624 )

2026-08-13 16:26:08 -07:00

README.md

init

2026-02-13 04:08:01 -08:00

runtime-traces-browse.md

feat(cli): add React-aware runtime traces (#1653 )

2026-08-16 19:34:13 -07:00

shadcn-composition-rules.md

feat(rules): add UI-library composition and correctness rules behind capability gates (#1654 )

2026-08-16 23:29:04 -07:00

vast-numbers-roll.md

fix(core): recover audit files after interrupted scans (#1690 )

2026-08-27 17:21:09 -07:00

README.md

Changesets

Hello and welcome! This folder has been automatically generated by @changesets/cli, a build tool that works with multi-package repos, or single-package repos to help you version and publish your code. You can find the full documentation for it in our repository

We have a quick list of common questions to get you started engaging with this project in our documentation