All pull requests

Pull requests

• Decode sealed detector payloads with @prosopo/native-bundle-payload

  #3700·forgetso opened Nov 2, 2026Member·

  ·
  

• Hide Mongo credentials in logged URLs

  #3699·forgetso opened Nov 2, 2026Member·

  ·
  

• Let ensure_indexes run without a captcha store URI

  #3698·forgetso opened Nov 2, 2026Member·

  ·
  

• Let self-hosters build without a Rust toolchain

  #3697·forgetso opened Nov 2, 2026Member·

  ·
  

• Add size limits to unbounded zod fields

  #3696·goastler opened Nov 2, 2026Member·

  ·
  

• Add shared URL slash helpers

  #3695·goastler opened Nov 2, 2026Member·

  ·
  2

  

• Add setGlobalLogContext to the logger

  #3694·goastler opened Nov 2, 2026Member·

  ·
  

• Keep the widget rendering on a malformed honeypot question

  #3692·goastler opened Nov 2, 2026Member·

  ·
  1

  

• Reject corrupt base64 and hex input

  #3691·goastler opened Nov 2, 2026Member·

  ·
  

• Log session stream and cache failures

  #3690·goastler opened Nov 2, 2026Member·

  ·
  

• Add fetch helpers that return a Result

  #3689·goastler opened Nov 2, 2026Member·

  ·
  

• Point docs at the demos and scripts that exist

  #3688·goastler opened Nov 2, 2026Member·

  ·
  

• Run decision machines in workers, retry datastores at startup, isolate mongo and redis

  #3680·goastler opened Nov 2, 2026Member·

  ·
  

• Bump follow-redirects from 1.16.1 to 1.16.2

  dependenciesjavascript
  #3679·dependabot[bot] opened Nov 2, 2026Bot·

  ·

• Store the full tcp-probe record on the Session

  #3668·goastler opened Oct 30, 2026Member·

  ·
  

• Experimental: providers answer siteverify with the site's secret key

  #3648·HughParry opened Oct 29, 2026Contributor·

  ·
  

• Load the detector from an https URL with a script tag (experimental)

  #3514·HughParry opened Oct 14, 2026Contributor·

  ·
  

• Let each node set its own mongo cache size

  #3494·forgetso opened Oct 6, 2026Member·

  ·
  13

  

• API router: don't hide errors that happen after the response started

  #3396·goastler opened Sep 25, 2026Member·

  ·
  

• Access rules: escape values in Redis search queries

  #3392·goastler opened Sep 25, 2026Member·

  ·
  

• Provider: rate-limit on verified identities, not values the caller chooses

  #3390·goastler opened Sep 25, 2026Member·

  ·
  

• Logger: stop changing the data you log, and survive circular data

  #3365·goastler opened Sep 25, 2026Member·

  ·
  

• Bundle: only boot once when the script is added after page load

  #3349·goastler opened Sep 25, 2026Member·

  ·
  

• feat(caddy): forward request header order to the provider

  #3290·HughParry opened Sep 17, 2026Contributor·

  ·
  

• fix(docker): mount the redis config that actually exists

  #3285·forgetso opened Sep 16, 2026Member·

  ·
  27