3 commits

Author	SHA1	Message	Date
Andrew Nesbitt	e2a683c7a6	Route handler metadata requests through Proxy.HTTPClient instead of http.DefaultClient ... All handler metadata and proxy requests were using http.DefaultClient directly, bypassing any timeout or transport configuration. Added an HTTPClient field to the Proxy struct with a 30-second default timeout, and updated every handler to use it for upstream HTTP requests.	2026-03-13 07:46:28 +00:00
Andrew Nesbitt	0e1a06c5e6	Add size limits on request bodies and upstream metadata reads ... POST endpoints (/api/outdated, /api/bulk) now reject bodies over 1 MB using http.MaxBytesReader. Upstream metadata reads (npm, pypi, composer, nuget, pub) now use io.LimitReader capped at 50 MB to prevent OOM from unexpectedly large responses.	2026-03-13 07:28:20 +00:00
Andrew Nesbitt	7b22638ef7	Hello world	2026-01-20 22:00:31 +00:00