No description
Find a file
John Smith 3a762c2f7d fix(server): prevent session fixation by always issuing new signin token
session/index.ts:73 reused getSessionToken(h3) ?? createSessionCookie(...) — pre-set cookies persisted across signin. Now always calls createSessionCookie and invalidates old session via removeSession.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-07-25 19:10:33 -04:00
.github ci: add cargo-llvm-cov coverage steps to Rust CI workflows 2026-07-25 19:10:16 -04:00
.husky dev: split pre-commit (lint+typecheck) and add pre-push (test) 2026-07-24 10:42:03 -04:00
.omo docs: create session handoff document at .omo/handoffs/session-handoff-2026-07-24.md 2026-07-24 15:22:29 -04:00
.opencode/skills/test-runner fix: order E2E test rule before generic server rule in SKILL.md 2026-07-25 03:53:05 -04:00
backend chore: SonarCloud remediation — bulk fix 284+ code quality issues (#25) 2026-07-25 12:14:06 -04:00
cli fix(deps): upgrade vulnerable transitive dependencies (#26) 2026-07-25 14:36:24 -04:00
desktop feat(desktop): extract TailscaleProvider trait with MockTailscale 2026-07-25 19:10:25 -04:00
docs docs: add coverage baseline snapshot 2026-07-24 16:52:13 -04:00
libraries chore: SonarCloud remediation — bulk fix 284+ code quality issues (#25) 2026-07-25 12:14:06 -04:00
patches fix: patch decompress@4.2.1 for CVE-2026-53486 path traversal 2026-07-24 12:16:55 -04:00
security sec: create risk register with all 13 remaining vulns documented 2026-07-24 13:58:19 -04:00
server fix(server): prevent session fixation by always issuing new signin token 2026-07-25 19:10:33 -04:00
sites fix(deps): upgrade vulnerable transitive dependencies (#26) 2026-07-25 14:36:24 -04:00
torrential chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 in /torrential (#14) 2026-07-24 14:27:45 -04:00
.codecov.yml chore(deps,ci): dependabot desktop/main + .codecov.yml + CI merge + MSW error + coverage scope (#28) 2026-07-25 14:18:47 -04:00
.coderabbit.yaml style: add trailing newlines to .coderabbit.yaml + SKILL.md 2026-07-24 18:02:52 -04:00
.dockerignore Attempt fix monorepo build (#404) 2026-04-27 15:38:05 +10:00
.editorconfig chore: add .editorconfig overrides for Makefile, .nix, .json 2026-07-24 13:56:37 -04:00
.env.example test: add CLI depot manifest edge cases (overwrite, empty serde) 2026-07-24 10:41:16 -04:00
.gitattributes Improve repo tooling (#398) 2026-04-20 11:44:38 +10:00
.gitignore chore: exclude .omo/run-continuation from git 2026-07-25 19:10:14 -04:00
AGENTS.md docs: add project skills section to AGENTS.md 2026-07-25 19:10:15 -04:00
CLAUDE.md docs: add AGENTS.md + CLAUDE.md for agent behavioral protocol 2026-07-24 07:33:57 -04:00
CONTRIBUTING.md fix(dependabot): fix registry key typo npm-(pkg-github -> npm-pkg-github 2026-07-24 13:45:48 -04:00
Dockerfile chore: SonarCloud remediation — bulk fix 284+ code quality issues (#25) 2026-07-25 12:14:06 -04:00
package.json test: add Vue component integration tests for SkeletonCard + EmojiText 2026-07-24 16:36:24 -04:00
pnpm-lock.yaml fix(deps): upgrade vulnerable transitive dependencies (#26) 2026-07-25 14:36:24 -04:00
pnpm-workspace.yaml fix(deps): upgrade vulnerable transitive dependencies (#26) 2026-07-25 14:36:24 -04:00
README.md Publish docs, update links (#431) 2026-06-21 16:39:34 +10:00
SECURITY.md sec: enhance SECURITY.md with SLA, scope, triage cadence, and risk register pointer 2026-07-24 13:51:30 -04:00
server.code-workspace style: fix editorconfig indent violations (5 files) 2026-07-24 13:56:06 -04:00
sonar-project.properties style: fix trailing whitespace and missing final newlines 2026-07-24 13:53:37 -04:00
vitest.config.ts test: harden vitest config, rewrite health test (real handler), add DB helper 2026-07-24 07:35:05 -04:00


Drop

Website Docs Static Badge GitHub License Discord Open Collective Weblate project translated

Drop is an open-source game distribution platform, similar to GameVault or Steam. It's designed to distribute and share DRM-free games quickly, all while being incredibly flexible, beautiful, and fast.

Drop Screenshot

Philosophy

  1. Drop is flexible. While abstractions and interfaces can complicate the codebase, the flexibility is worth it.
  2. Drop is secure. The nature of Drop means an instance can never be accessible without authentication. In line with #1, Drop also supports a huge variety of authentication mechanisms, from username/password to SSO.
  3. Drop is user-friendly. The interface is designed to be clean and simple to use, with advanced features available to users who want them.

Deployment

See our documentation on how to deploy Drop for more information.

Contributing

Please see the in-depth contributing guide. The guide includes information on how to set up the project, how to contribute code, how to report issues, and even how to effectively translate Drop.

Drop Translation Progress