Skip to content

Current Project Status

Jump to bottom
Evie edited this page Apr 29, 2026 · 2 revisions

Current Project Status

SeaViperCascade is currently in beta development.

The app has a working baseline build and can currently be installed and launched, but it is not ready for general use. Most functionality still needs proper manual testing, polish, and verification.

Current Baseline

The current beta build has been verified to:

  • Install successfully
  • Launch successfully
  • Unlock successfully
  • Lock successfully
  • Build successfully from source
  • Pass linting
  • Pass current automated tests
  • Package as a Windows Electron installer

Recently Fixed

The following major issues were identified and fixed:

  • Unauthenticated recovery import vulnerability
  • Unsafe default LAN exposure
  • Overly permissive CORS policy
  • Mobile QR token over-privilege
  • Recovery reset session persistence vulnerability
  • Unsafe URL validation and automation target risks
  • Automation job exposure and secret persistence risks
  • Raw internal error leakage
  • Weak CSV/logo/theme/recovery input limits
  • Missing security headers and CSP protections
  • Recovery PDF file handling and persistence risks
  • better-sqlite3 / Electron runtime compatibility issues
  • Node runtime and contributor build inconsistency

Still Needs Work

The following areas need proper end-to-end testing and/or fixes:

  • Vault bootstrap flow
  • Lock/unlock/relaunch persistence
  • Credential add/edit/delete/search flows
  • Recovery PDF export
  • Recovery import
  • Browser CSV import
  • Mobile QR sync
  • LAN sync behavior
  • Playwright password automation
  • Settings persistence
  • Clean install behavior

Not Production Ready

SVC should not currently be used as a password manager.

It is public solely for development, review, experimentation, and contribution for now.

Clone this wiki locally