Issues

• consistency-audit: check that the info.xml links are reachable

  auditenhancement
  ernolf/ncmake#352 · Filter by author ernolf opened on Oct 27, 2026

• php-audit and build-audit: inline scripts against the CSP, legacy hooks, frontend globals

  analysisauditenhancementnodephp
  ernolf/ncmake#351 · Filter by author ernolf opened on Oct 27, 2026

• php-audit: check the OCP symbols the app uses over its declared Nextcloud range

  analysisauditenhancementphp
  ernolf/ncmake#350 · Filter by author ernolf opened on Oct 27, 2026

• php-audit: check migrations against the schema rules of the server

  analysisauditenhancementphp
  ernolf/ncmake#349 · Filter by author ernolf opened on Oct 27, 2026

• php-audit: security patterns in the PHP source and templates

  analysisauditenhancementphp
  ernolf/ncmake#348 · Filter by author ernolf opened on Oct 27, 2026

• secrets-audit: find keys and tokens in the shipped files and in the history

  analysisauditenhancement
  ernolf/ncmake#347 · Filter by author ernolf opened on Oct 27, 2026

• deps-audit: check the licences of the shipped dependencies against the app licence

  analysisauditenhancementnodephp
  ernolf/ncmake#346 · Filter by author ernolf opened on Oct 27, 2026

• deps-audit: known vulnerabilities and abandoned packages in the shipped dependencies

  analysisauditenhancementnodephp
  ernolf/ncmake#345 · Filter by author ernolf opened on Oct 27, 2026

• make serve: run the staged app on a local server image in debug mode with xdebug

  containercoreenhancement
  ernolf/ncmake#344 · Filter by author ernolf opened on Oct 27, 2026

• consistency-audit: check the npm scripts against the installed workflows

  auditenhancementnodeworkflows
  ernolf/ncmake#343 · Filter by author ernolf opened on Oct 27, 2026

• Use every endpoint, command, job and setup check of the app on the install-test server, and read its debug log

  analysisauditcontainerenhancement
  ernolf/ncmake#342 · Filter by author ernolf opened on Oct 27, 2026

• php-audit: list the routes and API endpoints of an app, and find stale and broken ones

  analysisauditenhancementphp
  ernolf/ncmake#341 · Filter by author ernolf opened on Oct 27, 2026

• php-audit: read the PHP source, check class loading, registrations and the public API

  analysisauditenhancementphp
  ernolf/ncmake#340 · Filter by author ernolf opened on Oct 27, 2026
  1

• Profile an app on a real server: what it costs the requests of the server, and its own

  analysisauditenhancement
  ernolf/ncmake#339 · Filter by author ernolf opened on Oct 27, 2026
  1

• consistency-audit: repository-link explains only the missing tag and names <website>

  auditenhancement
  ernolf/ncmake#338 · Filter by author ernolf opened on Oct 27, 2026

• build-audit: record the bundler version the lock file resolves, not only the declared range

  auditenhancementnode
  ernolf/ncmake#337 · Filter by author ernolf opened on Oct 27, 2026

• consistency-audit: version-drift leaves out composer.json and names neither make version nor lint-version

  auditenhancement
  ernolf/ncmake#336 · Filter by author ernolf opened on Oct 27, 2026

• php-compat: report a fixed include path that is not shipped

  auditenhancementphp
  ernolf/ncmake#335 · Filter by author ernolf opened on Oct 27, 2026

• make build: no npm step for a frontend in js/, no composer step for a required vendor/autoload.php

  coreenhancementnodephp
  ernolf/ncmake#334 · Filter by author ernolf opened on Oct 27, 2026

• integrity-check: hold the certificate against a given root, and JSON=<file>

  coreenhancement
  ernolf/ncmake#333 · Filter by author ernolf opened on Oct 27, 2026

• make stable-branch: add the new branch to .github/dependabot.yml

  coreenhancementgithub
  ernolf/ncmake#328 · Filter by author ernolf opened on Oct 25, 2026

• integrity-enable: licence sidecar for the certificate, COMMIT=1 and PR=1, and -sm in printed commands

  bugcoreenhancementskill
  ernolf/ncmake#326 · Filter by author ernolf opened on Oct 24, 2026

• build: engines.npm in package.json is ignored

  bugcorenode
  ernolf/ncmake#294 · Filter by author ernolf opened on Oct 19, 2026

• php-compat: php-platform reads as a contradiction when the bound is <=X.Y

  auditenhancementphp
  ernolf/ncmake#293 · Filter by author ernolf opened on Oct 19, 2026

• ncmake-node: the image lacks bzip2, so install scripts that unpack .tar.bz2 fail

  bugcontainernode
  ernolf/ncmake#292 · Filter by author ernolf opened on Oct 19, 2026