From 3a1e5a062dd37d6a34918dc38a75a4ebdfd0e7fb Mon Sep 17 00:00:00 2001
From: Nitish Pattar <nitishpattar7@gmail.com>
Date: Sat, 4 Jul 2026 12:03:09 +0530
Subject: [PATCH 1/5] fix: sync org page filters and columns with URL

---
 app/pages/org/[org].vue | 55 +++++++++++++++++++++++++++++++++++++----
 1 file changed, 50 insertions(+), 5 deletions(-)

diff --git a/app/pages/org/[org].vue b/app/pages/org/[org].vue
index 47c2fa2fc9..d5e6551d3b 100644
--- a/app/pages/org/[org].vue
+++ b/app/pages/org/[org].vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
-import type { FilterChip, SortOption } from '#shared/types/preferences'
+import type { FilterChip, SortOption, DownloadRange, SecurityFilter, UpdatedWithin } from '#shared/types/preferences'
+import { DEFAULT_COLUMNS } from '#shared/types/preferences'
 import { normalizeSearchParam } from '#shared/utils/url'
 import { debounce } from 'perfect-debounce'
 
@@ -42,6 +43,15 @@ const packageCount = computed(() => packages.value.length)
 const { viewMode, paginationMode, pageSize, columns, toggleColumn, resetColumns } =
   usePackageListPreferences()
 
+const routeColumns = normalizeSearchParam(route.query.columns)
+if (routeColumns) {
+  const visibleIds = routeColumns.split(',')
+  columns.value = DEFAULT_COLUMNS.map(col => ({
+    ...col,
+    visible: visibleIds.includes(col.id),
+  }))
+}
+
 // Structured filters and sorting
 const {
   filters,
@@ -61,6 +71,11 @@ const {
 } = useStructuredFilters({
   packages,
   initialSort: (normalizeSearchParam(route.query.sort) as SortOption) ?? DEFAULT_SORT,
+  initialFilters: {
+    downloadRange: (normalizeSearchParam(route.query.downloadRange) as DownloadRange) || undefined,
+    security: (normalizeSearchParam(route.query.security) as SecurityFilter) || undefined,
+    updatedWithin: (normalizeSearchParam(route.query.updatedWithin) as UpdatedWithin) || undefined,
+  },
 })
 
 // Pagination state
@@ -84,24 +99,54 @@ watch(totalPages, newTotal => {
 })
 
 // Debounced URL update for filter/sort
-const updateUrl = debounce((updates: { filter?: string; sort?: string }) => {
+const updateUrl = debounce((updates: { 
+  filter?: string; 
+  sort?: string;
+  downloadRange?: string;
+  security?: string;
+  updatedWithin?: string;
+  columns?: string;
+}) => {
   router.replace({
     query: {
       ...route.query,
       q: updates.filter || undefined,
       sort: updates.sort && updates.sort !== DEFAULT_SORT ? updates.sort : undefined,
+      downloadRange: updates.downloadRange !== 'any' ? updates.downloadRange : undefined,
+      security: updates.security !== 'all' ? updates.security : undefined,
+      updatedWithin: updates.updatedWithin !== 'any' ? updates.updatedWithin : undefined,
+      columns: updates.columns || undefined,
     },
   })
 }, 300)
 
 // Update URL when filter/sort changes (debounced)
 watch(
-  [() => filters.value.text, () => filters.value.keywords, () => sortOption.value] as const,
-  ([text, keywords, sort]) => {
+  [
+    () => filters.value.text,
+    () => filters.value.keywords,
+    () => sortOption.value,
+    () => filters.value.downloadRange,
+    () => filters.value.security,
+    () => filters.value.updatedWithin,
+    () => columns.value.filter(c => c.visible).map(c => c.id).join(','),
+  ] as const,
+  ([text, keywords, sort, downloadRange, security, updatedWithin, visibleColumns]) => {
     const filter = [text, ...keywords.map(keyword => `keyword:${keyword}`)]
       .filter(Boolean)
       .join(' ')
-    updateUrl({ filter, sort })
+
+    const defaultVisible = DEFAULT_COLUMNS.filter(c => c.visible).map(c => c.id).join(',')
+    const cols = visibleColumns === defaultVisible ? undefined : visibleColumns
+
+    updateUrl({ 
+      filter, 
+      sort,
+      downloadRange,
+      security,
+      updatedWithin,
+      columns: cols
+    })
   },
 )
 

From 851286e60739470ff921f81b317cc4e9af8a9fa4 Mon Sep 17 00:00:00 2001
From: "autofix-ci[bot]" <114827586+autofix-ci[bot]@users.noreply.github.com>
Date: Sat, 4 Jul 2026 06:42:55 +0000
Subject: [PATCH 2/5] [autofix.ci] apply automated fixes

---
 app/pages/org/[org].vue | 67 +++++++++++++++++++++++++----------------
 1 file changed, 41 insertions(+), 26 deletions(-)

diff --git a/app/pages/org/[org].vue b/app/pages/org/[org].vue
index d5e6551d3b..a3c4ceb037 100644
--- a/app/pages/org/[org].vue
+++ b/app/pages/org/[org].vue
@@ -1,5 +1,11 @@
 <script setup lang="ts">
-import type { FilterChip, SortOption, DownloadRange, SecurityFilter, UpdatedWithin } from '#shared/types/preferences'
+import type {
+  FilterChip,
+  SortOption,
+  DownloadRange,
+  SecurityFilter,
+  UpdatedWithin,
+} from '#shared/types/preferences'
 import { DEFAULT_COLUMNS } from '#shared/types/preferences'
 import { normalizeSearchParam } from '#shared/utils/url'
 import { debounce } from 'perfect-debounce'
@@ -99,26 +105,29 @@ watch(totalPages, newTotal => {
 })
 
 // Debounced URL update for filter/sort
-const updateUrl = debounce((updates: { 
-  filter?: string; 
-  sort?: string;
-  downloadRange?: string;
-  security?: string;
-  updatedWithin?: string;
-  columns?: string;
-}) => {
-  router.replace({
-    query: {
-      ...route.query,
-      q: updates.filter || undefined,
-      sort: updates.sort && updates.sort !== DEFAULT_SORT ? updates.sort : undefined,
-      downloadRange: updates.downloadRange !== 'any' ? updates.downloadRange : undefined,
-      security: updates.security !== 'all' ? updates.security : undefined,
-      updatedWithin: updates.updatedWithin !== 'any' ? updates.updatedWithin : undefined,
-      columns: updates.columns || undefined,
-    },
-  })
-}, 300)
+const updateUrl = debounce(
+  (updates: {
+    filter?: string
+    sort?: string
+    downloadRange?: string
+    security?: string
+    updatedWithin?: string
+    columns?: string
+  }) => {
+    router.replace({
+      query: {
+        ...route.query,
+        q: updates.filter || undefined,
+        sort: updates.sort && updates.sort !== DEFAULT_SORT ? updates.sort : undefined,
+        downloadRange: updates.downloadRange !== 'any' ? updates.downloadRange : undefined,
+        security: updates.security !== 'all' ? updates.security : undefined,
+        updatedWithin: updates.updatedWithin !== 'any' ? updates.updatedWithin : undefined,
+        columns: updates.columns || undefined,
+      },
+    })
+  },
+  300,
+)
 
 // Update URL when filter/sort changes (debounced)
 watch(
@@ -129,23 +138,29 @@ watch(
     () => filters.value.downloadRange,
     () => filters.value.security,
     () => filters.value.updatedWithin,
-    () => columns.value.filter(c => c.visible).map(c => c.id).join(','),
+    () =>
+      columns.value
+        .filter(c => c.visible)
+        .map(c => c.id)
+        .join(','),
   ] as const,
   ([text, keywords, sort, downloadRange, security, updatedWithin, visibleColumns]) => {
     const filter = [text, ...keywords.map(keyword => `keyword:${keyword}`)]
       .filter(Boolean)
       .join(' ')
 
-    const defaultVisible = DEFAULT_COLUMNS.filter(c => c.visible).map(c => c.id).join(',')
+    const defaultVisible = DEFAULT_COLUMNS.filter(c => c.visible)
+      .map(c => c.id)
+      .join(',')
     const cols = visibleColumns === defaultVisible ? undefined : visibleColumns
 
-    updateUrl({ 
-      filter, 
+    updateUrl({
+      filter,
       sort,
       downloadRange,
       security,
       updatedWithin,
-      columns: cols
+      columns: cols,
     })
   },
 )

From 5df6f97c53cf80ffd7eb3c81c0a0141969d1292a Mon Sep 17 00:00:00 2001
From: Nitish Pattar <nitishpattar7@gmail.com>
Date: Sat, 4 Jul 2026 12:25:15 +0530
Subject: [PATCH 3/5] fix: safely validate query params against allowed values

---
 app/pages/org/[org].vue | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/app/pages/org/[org].vue b/app/pages/org/[org].vue
index a3c4ceb037..3a30c9c013 100644
--- a/app/pages/org/[org].vue
+++ b/app/pages/org/[org].vue
@@ -6,7 +6,12 @@ import type {
   SecurityFilter,
   UpdatedWithin,
 } from '#shared/types/preferences'
-import { DEFAULT_COLUMNS } from '#shared/types/preferences'
+import {
+  DEFAULT_COLUMNS,
+  DOWNLOAD_RANGES,
+  SECURITY_FILTER_VALUES,
+  UPDATED_WITHIN_OPTIONS,
+} from '#shared/types/preferences'
 import { normalizeSearchParam } from '#shared/utils/url'
 import { debounce } from 'perfect-debounce'
 
@@ -78,9 +83,13 @@ const {
   packages,
   initialSort: (normalizeSearchParam(route.query.sort) as SortOption) ?? DEFAULT_SORT,
   initialFilters: {
-    downloadRange: (normalizeSearchParam(route.query.downloadRange) as DownloadRange) || undefined,
-    security: (normalizeSearchParam(route.query.security) as SecurityFilter) || undefined,
-    updatedWithin: (normalizeSearchParam(route.query.updatedWithin) as UpdatedWithin) || undefined,
+    downloadRange: DOWNLOAD_RANGES.find(
+      r => r.value === normalizeSearchParam(route.query.downloadRange),
+    )?.value,
+    security: SECURITY_FILTER_VALUES.find(v => v === normalizeSearchParam(route.query.security)),
+    updatedWithin: UPDATED_WITHIN_OPTIONS.find(
+      o => o.value === normalizeSearchParam(route.query.updatedWithin),
+    )?.value,
   },
 })
 

From 8b53b4f9029a56b703050b08f63b4abba04689c0 Mon Sep 17 00:00:00 2001
From: Nitish Pattar <nitishpattar7@gmail.com>
Date: Wed, 8 Jul 2026 12:05:50 +0530
Subject: [PATCH 4/5] fix: safely evaluate query param against allowed values

---
 app/pages/org/[org].vue | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/pages/org/[org].vue b/app/pages/org/[org].vue
index 3a30c9c013..4e6bc6f7a0 100644
--- a/app/pages/org/[org].vue
+++ b/app/pages/org/[org].vue
@@ -56,7 +56,8 @@ const { viewMode, paginationMode, pageSize, columns, toggleColumn, resetColumns
 
 const routeColumns = normalizeSearchParam(route.query.columns)
 if (routeColumns) {
-  const visibleIds = routeColumns.split(',')
+  const allowedColumnIds = new Set(DEFAULT_COLUMNS.map(c => c.id))
+  const visibleIds = routeColumns.split(',').filter(id => allowedColumnIds.has(id as any))
   columns.value = DEFAULT_COLUMNS.map(col => ({
     ...col,
     visible: visibleIds.includes(col.id),

From 9aa9c0f9b60ce6592eae5655019d46fe9e529db2 Mon Sep 17 00:00:00 2001
From: "autofix-ci[bot]" <114827586+autofix-ci[bot]@users.noreply.github.com>
Date: Wed, 8 Jul 2026 06:39:33 +0000
Subject: [PATCH 5/5] [autofix.ci] apply automated fixes

---
 app/pages/org/[org].vue | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/pages/org/[org].vue b/app/pages/org/[org].vue
index 4e6bc6f7a0..0a47558793 100644
--- a/app/pages/org/[org].vue
+++ b/app/pages/org/[org].vue
@@ -57,10 +57,10 @@ const { viewMode, paginationMode, pageSize, columns, toggleColumn, resetColumns
 const routeColumns = normalizeSearchParam(route.query.columns)
 if (routeColumns) {
   const allowedColumnIds = new Set(DEFAULT_COLUMNS.map(c => c.id))
-  const visibleIds = routeColumns.split(',').filter(id => allowedColumnIds.has(id as any))
+  const visibleIds = new Set(routeColumns.split(',').filter(id => allowedColumnIds.has(id as any)))
   columns.value = DEFAULT_COLUMNS.map(col => ({
     ...col,
-    visible: visibleIds.includes(col.id),
+    visible: visibleIds.has(col.id),
   }))
 }