1 commit

Author	SHA1	Message	Date
Andrew Nesbitt	0e1a06c5e6	Add size limits on request bodies and upstream metadata reads ... POST endpoints (/api/outdated, /api/bulk) now reject bodies over 1 MB using http.MaxBytesReader. Upstream metadata reads (npm, pypi, composer, nuget, pub) now use io.LimitReader capped at 50 MB to prevent OOM from unexpectedly large responses.	2026-03-13 07:28:20 +00:00