Backend and cloud-native, mostly TypeScript and Go, out of Pune. I read other people's code until I find something wrong with it, and most of what is below started that way rather than from an issue tracker.
Kyverno CNCF, Go
#16977 merged, backported to release-1.19. Three more panic fixes open. |
SigNoz OpenTelemetryTheir OpAMP parser reads the collector config an agent reports about itself, then asserts its types outright. Four ordinary YAML mistakes panic it, the easiest being a processor indented one level too deep. |
|
Sparklines rendered flat below |
kured KubernetesA reboot lock taken while |
|
A cleanup function that was written but never returned, so no avatar blob URL was ever revoked. In a virtualized list that leaks once per scrolled row, and the same recycling let a stale response paint the wrong face. |
Three cryptography findings in a European end-to-end encrypted photo service, including a PBKDF2 iteration count that truncated to a single round on 32-bit builds. All three confirmed, patched and shipped the same day. |
Also in Headlamp, Infisical, Phase, OpenWISP and MDN.
- Dead dependencies don't get archived. They get quiet.
- Your local agent is spending 39% of its system prompt on skills it will never use
- shadPS4 shipped 239 commits and none of them say "fix memory leak"
