Skip to content

fix: resolve timingSafeEqual infinite recursion + correct repo URLs#61

Open
0xAxiom wants to merge 1 commit intomainfrom
fix/timing-safe-equal-recursion
Open

fix: resolve timingSafeEqual infinite recursion + correct repo URLs#61
0xAxiom wants to merge 1 commit intomainfrom
fix/timing-safe-equal-recursion

Conversation

@0xAxiom
Copy link
Owner

@0xAxiom 0xAxiom commented Mar 1, 2026

What

  1. Fix critical timingSafeEqual infinite recursion bug in plugins/repo-mode-launch/lib/hashing.ts - the exported function shadows the crypto import, causing stack overflow at runtime. Renamed import to cryptoTimingSafeEqual.

  2. Fix repository URL mismatch in package.json - repository.url and bugs.url pointed to 0xAxiom/AppFactory (fork) instead of MeltedMindz/AppFactory (canonical).

Why

  • The recursion bug will crash any code path that calls timingSafeEqual for hash comparison (security-critical)
  • URL mismatch causes npm metadata to point to the wrong repo

Tested

  • ESLint + Prettier pass (lint-staged)
  • Verified import rename correctly resolves to Node.js crypto.timingSafeEqual

@0xAxiom 0xAxiom requested a review from MeltedMindz as a code owner March 1, 2026 01:02
@0xAxiom 0xAxiom force-pushed the fix/timing-safe-equal-recursion branch from 074f122 to f116ecf Compare March 3, 2026 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant