Skip to content

Releases: cp099/repo-pulse

RepoPulse v1.0.0 - Executive Security Wallboard & Health Operations Hub

Choose a tag to compare

@cp099 cp099 released this 21 Oct 18:33

RepoPulse v1.0.0

RepoPulse is an open-source, real-time executive security wallboard and operational health hub for GitHub repositories. It consolidates Dependabot CVEs, CodeQL static code analysis flaws, and GitHub Pages deployment statuses into a unified, actionable interface designed for office monitors, laptops, and mobile devices.

Live Web Application: https://cp099.github.io/repo-pulse/


Key Highlights in v1.0.0

1. Executive Wallboard (TV, Monitor and Mobile Ready)

  • Circular Health Meter: Real-time portfolio clean percentage calculation with letter grading (A through D).
  • High-Visibility Telemetry Tiles: Formatted for readability from distance on wall monitors, displaying monitored repository totals, critical CVE tallies, CodeQL flaw counts, and Pages deployment health.
  • Incident Attention Radar: Automatically prioritizes and bubbles up repositories requiring urgent triage (critical/high severity alerts or failing build workflows).
  • Live Pages Stream: Live indicators for all active static site deployments with direct URL links.

2. Dedicated Repositories Ledger Sub-Page

  • Multi-Criteria Filtering: Filter across All Repos, Critical Incidents, Warnings, Clean, and GitHub Pages.
  • Multi-Field Sorting: Four-way sorting by Highest Severity, Most Alerts, Alphabetical, or Pages Build Status.
  • View Switcher: Seamless toggle between a Dashboard Cards Grid and a high-density Primer Table View.

3. Full-Page Alert Detail and Accordion Inspector

  • Comprehensive inspection page matching GitHub Primer design guidelines.
  • Accordion issues display vulnerability title, CVSS score badge, affected package name, vulnerable version range, and patched version.
  • Direct Navigation: Jump directly to the offending line of code on GitHub or open GitHub's fix advisory.

4. Zero-Intermediary Client-Direct Security

  • No Third-Party Proxies: All GitHub API queries run directly between your browser and api.github.com.
  • Zero Token Leakage: Tokens are stored strictly in browser memory and local storage. No third-party servers intercept credentials.
  • Optional Firebase Cloud Sync: Cross-device state synchronization via Google Cloud Firestore, secured by production security rules restricted to the authenticated GitHub UID (request.auth.uid == userId).

5. High-Performance and Silent Background Refresh

  • Silent background refresh executes on configurable intervals (1 to 10 minutes) without UI disruption.
  • Rate limit tracking with automated 5-second cooldown timer on manual refresh prevents quota depletion against GitHub's 5,000 req/hr bucket.
  • Optimized bundle splitting: main entry payload is just 24.6 kB gzipped.

6. Production Readiness, Privacy and Compliance

  • Legal Disclosures: Dedicated Privacy Policy and Terms & Conditions modals detailing client-side architecture and data rights.
  • Cookie Consent: GDPR and CCPA compliant banner for essential storage without tracking cookies.
  • Custom 404 Routing: In-app error view and public/404.html SPA router redirect for GitHub Pages.
  • Form Validation: Strict regex verification for Personal Access Tokens and owner/repo formats.
  • Spam and Bot Protection: Hidden honeypot inputs on connection forms block automated bot submissions.

7. Dependency Security (0 Vulnerabilities)

  • Resolved all 27 transitive dependency advisories (undici, vite, @grpc/grpc-js, esbuild, postcss-selector-parser).
  • Verified with npm audit and clean production build (tsc -b && vite build) in 1.08s.

Technical Specifications

  • Frontend: React 18, Vite 6, TypeScript 5.6, Tailwind CSS 3.4
  • Icons: Lucide React matching GitHub Primer Octicons
  • API: GitHub REST API v3
  • Authentication: Firebase 10 Modular SDK (GitHub OAuth Provider)
  • Database: Google Cloud Firestore (production rules)
  • CI/CD: GitHub Actions (GitHub Pages deployment and CodeQL scanning)

Commits Included in v1.0.0

  • 65a35e1 refactor(cleanup): remove all emojis across docs, templates, and assets, replace with Google icons where needed, and eliminate AI artifacts
  • 89abf0e docs(community): establish 100% GitHub Community standards, viral README, issue forms, PR template, Code of Conduct, License, and Security policy
  • e54b104 feat(production): add privacy & terms, cookie consent, custom 404, favicon, og-preview, speed optimizations, form validation, and spam protection
  • 7850abc fix(security): resolve 27 Dependabot alerts via npm overrides and Vite 6 upgrade
  • 13ec5ee Split pure Executive Wallboard Dashboard for TVs/monitors and dedicated Repositories sub-page
  • b35be49 Add full-width cards dashboard, full-page expandable alerts, silent background sync, and CodeQL/Dependabot config
  • 271c745 Add Onboarding Landing Home Page, gate dashboard behind login, and remove demo mode
  • 92c9da2 Update settings modal to show active Firebase connection status
  • dd711d9 Add 1-click GitHub OAuth via Firebase, Firestore rules, and Stitch high-density UI
  • c0b828e Initial commit: RepoPulse - Real-time GitHub Health, Security & Pages Dashboard

Quickstart

Navigate to https://cp099.github.io/repo-pulse/ and click Connect GitHub Account to begin monitoring.