pub-dev

pub-dev copied to clipboard

Validate tar-encoding

3

We should decode and re-encode all tarballs we serve. This would ensure that tweaks in tarball which are ignored by `tar` cannot be used to create a file that interpreted...

jonasfj

harden CSP policies further

3

Check: https://csp-evaluator.withgoogle.com It seems it's not enough to trust specific domains. We should probably use: * `hash`, and, * `strict-dynamic` * `block-all-mixed-content`

jonasfj

Allow users to remove themselves from a package

2

I discussed this with @mit-mit today, once we have a history: https://github.com/dart-lang/pub-dev/issues/2687 it makes sense to allow users to removed themselves.

jonasfj

jonasfj

allow automatic upload of CM information with packages

9

@mit-mit @isoos Dartdoc now supports linking directly to source code for generated API documentation. However, in order for this to work with the pub site, users have to [autogenerate dartdoc_options.yaml...

jcollins-g

Version list page does not look nice at 320 width

1

We could consider adding a scrolling bar such that the version does not wrap around.

szakarias

Contrast between copy icons and background is not high enough

1

We could consider making them black.

szakarias

From: https://pub.dartlang.org/documentation/iconify_flutter/0.0.5/package.tar.gz Downloading the entire documentation fails for some packages. We could return 404 instead, if the object is too large.. We could also decide not to offer this file...

jonasfj

Investigate if keyboard navigation should handle the space key the same as the enter key.

5

isoos

Contrast between disabled like button and background is not high enough

1

We could instead consider having an outlined icon like Youtube. Problem with having it filled with high contrast is that one might think that the package is already liked.

szakarias