Supply Chain page: Cargo + bundled-runtime snapshots, provable Node pin#98

Merged

nedtwigg merged 21 commits into

mainfrom

bad-draft-supply-chain

May 26, 2026

Commits on May 26, 2026

Drop requirement/scope/features from direct Cargo dependency listing

nedtwigg
and
claude
committed
Summarize tend secret blast radius up front in SECURITY.md

nedtwigg
and
claude
committed
Normalize license strings: slash to OR, MIT first

nedtwigg
and
claude
committed
Add Author column to direct Cargo table and align table spacing

nedtwigg
and
claude
committed
Unify Supply Chain link styling and add security overview

nedtwigg
and
claude
committed
Tighten Supply Chain copy

nedtwigg
and
claude
committed
List bundled Node.js runtime in supply chain

nedtwigg
and
claude
committed
Always run pty host under Electron's bundled Node

nedtwigg
and
claude
committed
Remove unused totalDependencyCount in SupplyChain

nedtwigg
and
claude
committed
Make the disclosed Node.js runtime version provable

nedtwigg
and
claude
committed
Clarify Cargo crates aren't all shipped in the final binary

nedtwigg
and
claude
committed
Bump bundled Node.js runtime to 22.22.3

nedtwigg
and
claude
committed
Don't regenerate dependency snapshots during website build

nedtwigg
and
claude
committed
Polish Supply Chain page and fill in libappindicator crate metadata

nedtwigg
and
claude
committed