Block a user
EC fork audit 2026-09 — tracking index
Nothing in CI or the test suite exercises
src/lotus/* at all
Closed by the 0.25.0-lotus.2 fix round. src/lotus/ now has 11 colocated vitest files (lotusActions, lotusAudioConstraints, lotusAudioInject, lotusCallState, lotusDeafen, lotusDecorations,…
Nothing in CI or the test suite exercises
src/lotus/* at all
Landscape filmstrip rail-shrink query is height-only, not orientation- or device-aware
lotusFlag/lotusParam URL cache is captured once at module load, not re-read
Audio-output sink is never restored when the selected device becomes undefined again
lotusTransparent/lotusTheme provide no contrast guard for an arbitrary host background