
Security News
New React Server Components Vulnerabilities: DoS and Source Code Exposure
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.
An application for managing model rocketry launch events.
This project is open source under ISC License. Contributors are welcome.
You use VSCode, right?
(It's not required but, boy, will it make your life easier. )
TODO:
lefthook to ensure pre-commit scripts runpre-commit script for code lintingpre-commit script for testsFlightCard is a single-page web app (SPA), with the following architecture:
graph TB
client[Browser]
fb["Firebase (auth + db)"]
cf["Cloudflare (member certification API)"]
client --> fb
client --> cf
The browser client is a single-page app (SPA), using TypeScript + React. User authentication is handled using Google's Firebase auth service. All app data (launches, attendees, flightcards, etc...) is stored in the Realtime Database().
The React components can be found in the components directory.
Note: Because this app uses the Realtime Database, changes to data are automatically synced cross all clients. This, combined with the realtime React hooks (see rt directory) upon which most of the components are built, means that pretty much any change a user may make will appear immediately to all other users. (Cool, right?!?)
There's not a whole lot to say about this. It's a data store with an API that pushes changes to the backend data out to all clients in realtime. This, combined with the React hooks in the rt directory (used to render backend data into a component) mean any change user makes will be synced to all users, in realtime(!).
Contributors will need to set up their own Firebase account and configure it accordingly. (Instructions forthcoming).
TODO:
dev database with configured security rules.Information about TRA and NAR member certifications (set in the user's profile page) is fetched from a small API implemented in a CloudFlare worker. The code for this is in the worker directory.
Member cert information is actually cached in CloudFlare's KV Store. The scripts used to initially seed the store are in worker/src/publish_*. There is also a scheduled event in the worker itself (worker/src/index.ts#schedule) that keeps the KV store updated with any new changes to member information. This runs once per day. (I.e. It may take up to 24 hours for a member's information to be updated when it changes.)
Much like Firebase, contributors will need to set up their own Cloudflare account and configure a worker.
TODO:
dev worker + KV namespace seeded with sample member cert info.FAQs
Flight Card Management for Model Rocket Launches
The npm package flightcard receives a total of 4 weekly downloads. As such, flightcard popularity was classified as not popular.
We found that flightcard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.