RepoPulse v1.0.0 - Executive Security Wallboard & Health Operations Hub

[cp099]

RepoPulse v1.0.0

RepoPulse is an open-source, real-time executive security wallboard and operational health hub for GitHub repositories. It consolidates Dependabot CVEs, CodeQL static code analysis flaws, and GitHub Pages deployment statuses into a unified, actionable interface designed for office monitors, laptops, and mobile devices.

Live Web Application: https://cp099.github.io/repo-pulse/

---

Key Highlights in v1.0.0

1. Executive Wallboard (TV, Monitor and Mobile Ready)

• Circular Health Meter: Real-time portfolio clean percentage calculation with letter grading (A through D).
• High-Visibility Telemetry Tiles: Formatted for readability from distance on wall monitors, displaying monitored repository totals, critical CVE tallies, CodeQL flaw counts, and Pages deployment health.
• Incident Attention Radar: Automatically prioritizes and bubbles up repositories requiring urgent triage (critical/high severity alerts or failing build workflows).
• Live Pages Stream: Live indicators for all active static site deployments with direct URL links.

2. Dedicated Repositories Ledger Sub-Page

• Multi-Criteria Filtering: Filter across All Repos, Critical Incidents, Warnings, Clean, and GitHub Pages.
• Multi-Field Sorting: Four-way sorting by Highest Severity, Most Alerts, Alphabetical, or Pages Build Status.
• View Switcher: Seamless toggle between a Dashboard Cards Grid and a high-density Primer Table View.

3. Full-Page Alert Detail and Accordion Inspector

• Comprehensive inspection page matching GitHub Primer design guidelines.
• Accordion issues display vulnerability title, CVSS score badge, affected package name, vulnerable version range, and patched version.
• Direct Navigation: Jump directly to the offending line of code on GitHub or open GitHub's fix advisory.

4. Zero-Intermediary Client-Direct Security

• No Third-Party Proxies: All GitHub API queries run directly between your browser and api.github.com.
• Zero Token Leakage: Tokens are stored strictly in browser memory and local storage. No third-party servers intercept credentials.
• Optional Firebase Cloud Sync: Cross-device state synchronization via Google Cloud Firestore, secured by production security rules restricted to the authenticated GitHub UID (request.auth.uid == userId).

5. High-Performance and Silent Background Refresh

• Silent background refresh executes on configurable intervals (1 to 10 minutes) without UI disruption.
• Rate limit tracking with automated 5-second cooldown timer on manual refresh prevents quota depletion against GitHub's 5,000 req/hr bucket.
• Optimized bundle splitting: main entry payload is just 24.6 kB gzipped.

6. Production Readiness, Privacy and Compliance

• Legal Disclosures: Dedicated Privacy Policy and Terms & Conditions modals detailing client-side architecture and data rights.
• Cookie Consent: GDPR and CCPA compliant banner for essential storage without tracking cookies.
• Custom 404 Routing: In-app error view and public/404.html SPA router redirect for GitHub Pages.
• Form Validation: Strict regex verification for Personal Access Tokens and owner/repo formats.
• Spam and Bot Protection: Hidden honeypot inputs on connection forms block automated bot submissions.

7. Dependency Security (0 Vulnerabilities)

• Resolved all 27 transitive dependency advisories (undici, vite, @grpc/grpc-js, esbuild, postcss-selector-parser).
• Verified with npm audit and clean production build (tsc -b && vite build) in 1.08s.

---

Technical Specifications

• Frontend: React 18, Vite 6, TypeScript 5.6, Tailwind CSS 3.4
• Icons: Lucide React matching GitHub Primer Octicons
• API: GitHub REST API v3
• Authentication: Firebase 10 Modular SDK (GitHub OAuth Provider)
• Database: Google Cloud Firestore (production rules)
• CI/CD: GitHub Actions (GitHub Pages deployment and CodeQL scanning)

---

Commits Included in v1.0.0

• 65a35e1 refactor(cleanup): remove all emojis across docs, templates, and assets, replace with Google icons where needed, and eliminate AI artifacts
• 89abf0e docs(community): establish 100% GitHub Community standards, viral README, issue forms, PR template, Code of Conduct, License, and Security policy
• e54b104 feat(production): add privacy & terms, cookie consent, custom 404, favicon, og-preview, speed optimizations, form validation, and spam protection
• 7850abc fix(security): resolve 27 Dependabot alerts via npm overrides and Vite 6 upgrade
• 13ec5ee Split pure Executive Wallboard Dashboard for TVs/monitors and dedicated Repositories sub-page
• b35be49 Add full-width cards dashboard, full-page expandable alerts, silent background sync, and CodeQL/Dependabot config
• 271c745 Add Onboarding Landing Home Page, gate dashboard behind login, and remove demo mode
• 92c9da2 Update settings modal to show active Firebase connection status
• dd711d9 Add 1-click GitHub OAuth via Firebase, Firestore rules, and Stitch high-density UI
• c0b828e Initial commit: RepoPulse - Real-time GitHub Health, Security & Pages Dashboard

---

Quickstart

Navigate to https://cp099.github.io/repo-pulse/ and click Connect GitHub Account to begin monitoring.

---

This discussion was created from the release RepoPulse v1.0.0 - Executive Security Wallboard & Health Operations Hub.