Search results

package.json version and CHANGELOG.md are stale — repo says 1.0.1, npm has shipped v1.0.2/v1.0.3 with grade-changing rule fixes and no changelog entries

Status: Open.

#94 In HailBytes/security-headers;

· dmchaledev opened on Jul 5, 2026

Report silently grades the post-redirect URL while labeling it with the pre-redirect one

Status: Open.

#93 In HailBytes/security-headers;

· dmchaledev opened on Jul 4, 2026

fetchHeaders has no SSRF protection — arbitrary/internal URLs are fetched unchecked

Status: Open.

#91 In HailBytes/security-headers;

· dmchaledev opened on Jul 2, 2026

Add CLI integration tests — cli.ts and fetch.ts have 0% coverage, including the exit-code CI-gate feature

enhancementNew feature or requestNew feature or request

testing

Status: Open.

#65 In HailBytes/security-headers;

· dmchaledev opened on Jun 11, 2026

agent-escalate: Permissions-Policy rule should require camera/microphone/geolocation to award full score

Status: Open.

#4 In HailBytes/security-headers;

· dmchaledev opened on May 26, 2026