[ derekross/zaptrax ] refactor: security hardening, performance optimization, and code cleanup - Fix unscoped deletion queries (kind 5) that fetched ALL deletions globally; now scoped by author with #k filter for much less relay load - Add SSRF protection: validate domains in NIP-05 resolution and lightning address parsing, URL-encode user input in constructed URLs - Remove 30+ console.log/debug statements leaking API credentials and internal state to browser console (PodcastIndex auth headers, track metadata, audio state, cast URLs, etc.) - Refactor RSS parser to eliminate double-fetching: extract shared

GitHub

refactor: security hardening, performance optimization, and code cleanup · derekross/zaptrax@a4f7301

- Fix unscoped deletion queries (kind 5) that fetched ALL deletions globally; now scoped by author with #k filter for much less relay load - Add ...

[ kenya12345678/NostrGator ] Update README.md

GitHub

Update README.md · kenya12345678/NostrGator@e7b1ca8

⚡ Build a complete Nostr relay infrastructure for fast, secure, and sovereign communication, giving you full control over your data and transacti...

[ rhonda-rodododo/llamenos ] feat: show volunteer names in audit log with linked profile pages Audit log now resolves pubkeys to display names and links to a new volunteer profile page (/volunteers/$pubkey) showing details, shift assignments, and filtered activity history. Translations for 13 locales. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

GitHub

feat: show volunteer names in audit log with linked profile pages · rhonda-rodododo/llamenos@bff4065

Audit log now resolves pubkeys to display names and links to a new volunteer profile page (/volunteers/$pubkey) showing details, shift assignments,...

[ derekross/zappix ] fix: security fixes, bug fixes, and refactors across 27 files - Fix XSS vulnerability in PublicUserProfilePage (unvalidated website URLs) - Fix NIP-09 deletion author validation (anyone could delete others' events) - Clear nsec/bunker state on login/signup dialog close - Fix pagination direction bug in useUserVideoPosts (since -> until) - Fix encodeURI -> encodeURIComponent for zap requests - Fix state update during render in useNWC - Fix VideoPostActions mute to persist via Nostr (was purely local) - Fix dead error handling in VideoPost (try/catch around non-async mutate)

GitHub

fix: security fixes, bug fixes, and refactors across 27 files · derekross/zappix@9fadcfd

- Fix XSS vulnerability in PublicUserProfilePage (unvalidated website URLs) - Fix NIP-09 deletion author validation (anyone could delete others&#39...

[ BigBrotr/bigbrotr ] fix: upgrade pip/setuptools/wheel in Docker image for CVE fixes Upgrade pip, setuptools, and wheel before installing project wheels to resolve fixable vulnerabilities found by Trivy gate scan: - jaraco.context 5.3.0 → 6.1.0 (CVE-2026-23949, path traversal) - wheel 0.45.1 → 0.46.2 (CVE-2026-24049, privilege escalation) Also add Codecov coverage badge to README.

GitHub

fix: upgrade pip/setuptools/wheel in Docker image for CVE fixes · BigBrotr/bigbrotr@d710b86

Upgrade pip, setuptools, and wheel before installing project wheels to resolve fixable vulnerabilities found by Trivy gate scan: - jaraco.context 5...

[ chebizarro/nostrc ] fix: remove temp relay creation, connect real relays instead query_thread_func was creating throwaway NostrRelay objects for every query when the pool's relays weren't connected yet. Each temp relay opened a fresh WebSocket connection (DNS + TLS + handshake), used it for one query, then disconnected and freed it. The next query to the same relay would create another throwaway connection. Replace with direct nostr_relay_connect() on the real core_relay from the snapshot. nostr_relay_connect() returns immediately if already

GitHub

fix: remove temp relay creation, connect real relays instead · chebizarro/nostrc@4a70600

query_thread_func was creating throwaway NostrRelay objects for every query when the pool&#39;s relays weren&#39;t connected yet. Each temp relay o...

[ privkeyio/keep ] Improve desktop UX for Android share distribution workflow (#181) * Improve desktop UX for Android share distribution workflow * Add npub display, discoverable export, and create screen improvements * UI polish: copy npub, share count sidebar, unlock subtitle, toast duration * Add back buttons to create/import, show share name in delete confirmation

GitHub

Improve desktop UX for Android share distribution workflow (#181) · privkeyio/keep@1d87bc1

* Improve desktop UX for Android share distribution workflow * Add npub display, discoverable export, and create screen improvements * UI polish:...

[ BigBrotr/bigbrotr ] fix: improve Trivy scanning with unfixed CVE bypass and SARIF upload - Add ignore-unfixed to gate scans so unfixed upstream CVEs no longer block deploys - Add SARIF report scans with upload to GitHub Security tab for persistent vulnerability visibility - Add security-events permission to build job - Create .trivyignore for future false positive management

GitHub

fix: improve Trivy scanning with unfixed CVE bypass and SARIF upload · BigBrotr/bigbrotr@c8fee31

- Add ignore-unfixed to gate scans so unfixed upstream CVEs no longer block deploys - Add SARIF report scans with upload to GitHub Security tab f...

[ PrimalHQ/primal-android-app ] Set profile lightning address in onboarding flow

GitHub

Set profile lightning address in onboarding flow · PrimalHQ/primal-android-app@3108566

Primal's Android app for Nostr. Contribute to PrimalHQ/primal-android-app development by creating an account on GitHub.

[ nogringo/nostr-mail-client ] chore: update dependencies

GitHub

chore: update dependencies · nogringo/nostr-mail-client@fd7879a

Flutter email client for Nostr - send and receive encrypted emails using the Nostr protocol - chore: update dependencies · nogringo/nostr-mail-cli...

[ nogringo/nostr-mail-dart ] chore: bump version to 1.4.2

GitHub

chore: bump version to 1.4.2 · nogringo/nostr-mail-dart@5377a53

Dart SDK for sending and receiving emails over Nostr using NIP-59 gift-wrapped messages - chore: bump version to 1.4.2 · nogringo/nostr-mail-dart@...

[ dmotz/trystero ] simplified rolldown

GitHub

simplified rolldown · dmotz/trystero@65163c7

✨🤝✨ Build instant multiplayer webapps, no server required — Magic WebRTC matchmaking over BitTorrent, Nostr, MQTT, IPFS, Supabase, and Fir...

[ chebizarro/nostrc ] fix: wire NIP-66 pool with nostrdb cache + limit temp relay creation NIP-66 relay discovery used a private pool with no cache query or event sink, so results were never persisted to nostrdb and subsequent queries always hit the network. Add gnostr_pool_wire_ndb() helper and wire the NIP-66 pool with the same nostrdb callbacks as the shared query pool. Also limit temp relay creation in query_thread_func to ONE successful connection. Previously, when no relays were connected yet (startup), the worker thread would create N temp relays sequentially, each blocking

GitHub

fix: wire NIP-66 pool with nostrdb cache + limit temp relay creation · chebizarro/nostrc@803677d

NIP-66 relay discovery used a private pool with no cache query or event sink, so results were never persisted to nostrdb and subsequent queries alw...

[ vitorpamplona/amethyst ] - Fixes copyright using KDoc patterns instead of simpler comments - Moves spotless and git-hooks to hidden folders

GitHub

- Fixes copyright using KDoc patterns instead of simpler comments · vitorpamplona/amethyst@710f15f

- Moves spotless and git-hooks to hidden folders

[ greenart7c3/Citrine ] Merge pull request #100 from greenart7c3/l10n_crowdin_translations New Crowdin Translations

GitHub

Merge pull request #100 from greenart7c3/l10n_crowdin_translations · greenart7c3/Citrine@6f717f5

New Crowdin Translations

[ BigBrotr/bigbrotr ] chore: update gitignore cache and stop tracking .claude/ directory

GitHub

chore: update gitignore cache and stop tracking .claude/ directory · BigBrotr/bigbrotr@4a5cdfe

Modular observatory for Nostr protocol. Built with Python and PostgreSQL, it provides comprehensive tools for relay discovery, health monitoring, a...

[ derekross/plektos ] perf: code splitting, vendor chunks, image optimization, and EventDetail query fix - Add React.lazy + Suspense route-level code splitting (main chunk 1397KB -> 483KB) - Add vendor chunk splitting for react, nostr, leaflet, radix-ui, tanstack-query - Replace useEvents({ limit: 500 }) in EventDetail with targeted useEventRSVPs hook - Compress default-calendar.png (1.2MB -> 60KB) and switch nav icon to icon-192.png (402KB -> 32KB) - Move leaflet CSS import from global main.tsx into MapView component - Remove unused recharts and lodash dependencies - Add React.memo to CommentItem, ParticipantItem, RSVPAvatar - Fix ParticipantSearch staleTime: 0 debug leftover

GitHub

perf: code splitting, vendor chunks, image optimization, and EventDet… · derekross/plektos@1e0df35

…ail query fix - Add React.lazy + Suspense route-level code splitting (main chunk 1397KB -&gt; 483KB) - Add vendor chunk splitting for react, no...

[ rehansahab/Sparkle-Protocol ] Update README.md

GitHub

Update README.md · rehansahab/Sparkle-Protocol@04fcdc5

🔗 Enable trustless atomic swaps for Bitcoin Ordinals using the Lightning Network, ensuring secure and efficient transactions. - Update README.md...

[ chebizarro/nostrc ] feat: event sink on GNostrPool — auto-persist relay results to nostrdb Add GNostrPoolEventSinkFunc callback API to GNostrPool. When set, every batch of events fetched by query_async is automatically passed to the sink before returning results to the caller. The sink is called from the worker thread — implementation must be thread-safe. Wire up the shared query pool (s_shared_query_pool) to call storage_ndb_ingest_events_async as its event sink. This means all 39+ callers of gnostr_pool_query_async automatically persist relay results

GitHub

feat: event sink on GNostrPool — auto-persist relay results to nostrdb · chebizarro/nostrc@b309d5d

Add GNostrPoolEventSinkFunc callback API to GNostrPool. When set, every batch of events fetched by query_async is automatically passed to the sink ...

[ derekross/zappix ] fix: update deps

GitHub

fix: update deps · derekross/zappix@3bc7ce1

A nostr image sharing application for browsing, sharing, and zapping visual content. - fix: update deps · derekross/zappix@3bc7ce1