[ralyodio]

The deployed site installs @profullstack/footer 0.2.6 from the lockfile, so newer templates omit the newsletter signup form and can regress to an older CDN template. Update the locked renderer to 0.6.14 and replace the outer footer element with a div so the shared component owns the footer markup and border.

Verified all 369 tests, typecheck, lint (four existing warnings), a production build, and desktop/mobile browser checks: version 0.6.14, one signup form, no nested footers, and no horizontal overflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​profullstack/​footer@​0.2.6 ⏵ 0.6.14	+10		+1	+2

View full report

[github-actions]

ThreatCrush Security Scan

14 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 4 | LOW: 8

Severity	Rule	Location
HIGH	sh-unquoted-expansion-destructive	public/install.sh:67
HIGH	sh-remote-script-execution	public/install.sh:89
MEDIUM	sh-remote-script-execution	public/install.sh:133
MEDIUM	js-open-redirect	src/app/numbers/page.tsx:180
MEDIUM	js-open-redirect	src/components/inbox-client.tsx:35
MEDIUM	js-unescaped-html-sink	src/components/pit-footer.tsx:17
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:24
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:46
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:60
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:78
LOW	secret-generic-credential	src/lib/vault/__tests__/vault.test.ts:117
LOW	secret-generic-credential	src/lib/webhooks/__tests__/supabase-store.test.ts:11
LOW	secret-generic-credential	supabase/config.toml:287
LOW	secret-generic-credential	supabase/config.toml:319

Snippets are redacted; ThreatCrush never prints matched credential material.