Conversation
Mutable version tags can be silently moved to malicious commits, enabling supply chain attacks. Pin both third-party actions to their current commit SHAs to prevent tag-move attacks. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Apply least-privilege principle by declaring only the permissions each workflow actually needs, instead of relying on the broad default GITHUB_TOKEN scope. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The @v6 tag does not exist for actions/checkout; current stable is v4. Pin to the immutable commit SHA for v4.3.1 to prevent tag-squatting and ensure reproducible builds. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The overly broad 'on: push' trigger ran the TOC generator with write permissions on every push to every branch. Scope it to master only and only when README.md changes to reduce attack surface and unnecessary workflow runs. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The bare '###' heading on line 184 produced a broken '[](#)' anchor in the Table of Contents, making the newsletter entry invisible to navigation and screen readers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
rawgit.com was permanently shut down in October 2019, making the Awesome badge image broken. Use the jsDelivr CDN as the recommended replacement. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
vue-echarts was listed twice: once via Justineo/vue-echarts (the original personal repo) and once via ecomfe/vue-echarts (the official Apache ECharts org). Keep only the canonical ecomfe entry. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Google URL Shortener (goo.gl) was permanently shut down in August 2025. The bit.ly WhatsApp group link is also unreliable for ephemeral community resources. Remove all three entries since their destinations are unrecoverable. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
All ~35 markdown links using http:// have been upgraded to https://. Modern browsers and servers handle HTTPS universally; the old http:// links caused unnecessary redirects and browser security warnings. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The style guide URL pointed to the Vue 2 version (/v2/style-guide/) which is outdated now that Vue 3 is the current major version. Update to the current URL at /style-guide/. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Remove Weex: retired from Apache Incubator in Dec 2021, no longer maintained - Fix vuefire: pointed to abandoned personal fork (nigeltiany/vuefire) instead of the official vuejs/vuefire maintained by the Vue core team - Remove vue-enterprise-boilerplate: archived by its author in 2021, uses deprecated Vue CLI 3 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Prune resources hosted on platforms that no longer serve the original content: - javascriptair.com (defunct podcast network) - scotch.io (acquired, old URLs broken) - tutorialzine.com (domain sold, content gone) - alligator.io (merged into DigitalOcean, old URLs dead) - pusher.com/tutorials (5 entries, tutorial subdirectory removed) - gold.xitu.io (migrated to juejin.cn) - embalses.azurewebsites.net (expired Azure free-tier demo) - openfunctioncomputers.com (Vue 1.x-era project, dead) - YouTube AdBlitz 2016 (one-time campaign, domain decommissioned) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
First steps for cleanup as mentioned in #4323 or #4138
Yes, I used claude, but I checked it by hand