Pull Request Explorer

Summary

Skip add-recent-color on incomplete colorpicker state

Fixes internal assertion errors when closing the fill dialog with an incomplete color state, preventing crashes and improving user experience.

Health Assessment

• • The change is small and focused, but the long cycle time suggests a delayed review or complex issue resolution.

Summary

Fix display-guides shortcut for non-US layouts

Makes the display-guides shortcut accessible on non-US keyboard layouts by using physical key codes.

Health Assessment

• • The PR had a relatively long cycle time of 240 hours, but this was likely due to the time it took for the author to address the issue and for the reviewers to verify the fix.

Summary

Add selection size badge below bounding box

Adds a read-only badge below the bounding box of the current selection, showing its size.

Health Assessment

• • The PR had a relatively long cycle time of 236 hours, but the review process was smooth with only one round of comments.

Summary

Fix lost-update race on team.features

Prevents data loss when multiple users create files concurrently, ensuring feature flags are correctly preserved.

Health Assessment

• • The PR contains only a small change to a backend Clojure file and a documentation update, but the long cycle time is due to multiple merge commits with the develop branch rather than code complexity. The change is low risk and unlikely to introduce regressions.

Summary

Reuse shared Nginx security headers

Adds critical security headers to Nginx configuration, strengthening protection against clickjacking, XSS, and other web threats.

Health Assessment

• • Fast 2.7‑hour cycle, minimal changes, no review back‑and‑forth.

Summary

Fix nitrate lookups to use nested organization

Corrects organization data lookups in the frontend, ensuring accurate organization detection and improving user experience in dashboards and modals.

Health Assessment

• • Fast cycle time and minimal changes indicate a straightforward bug fix with low risk.

Summary

Health Assessment

Summary

Change margin for current plan

Adjusts the margin spacing for the current plan section in the subscription dashboard, improving visual alignment and user experience.

Health Assessment

• • Quick UI tweak merged within 1.3 hours with minimal review, indicating an efficient process.

Summary

Change team organization structure on state

This PR restructures team data by nesting organization information, improving data modeling, maintainability, and reducing cognitive load for developers. The change preserves existing behavior while simplifying future evolution of organization attributes.

Health Assessment

• • Fast cycle time and minimal rework indicate a smooth review process; the refactor improves maintainability without affecting functionality.

Summary

Refactor GpuState and RenderState

Refactors GPU and render state to decouple GPU logic, enabling future non‑GPU rendering and improving modularity and potential performance.

Health Assessment

• • The PR involved a substantial refactor of the rendering engine, touching 14 Rust files and over 500 lines of code.
• • Despite the large scope, the review process was straightforward and completed within a day, indicating a well‑structured change.

Summary

Fix pixel grid color row

Resolves issue with pixel grid color row, improving user experience.

Health Assessment

• • The PR had a long cycle time and time to first review, indicating potential review friction.

Summary

Fix linecap rendering for open paths

Corrects visual rendering of round and square linecaps in open paths, ensuring accurate design previews for users.

Health Assessment

• • Quick fix with minimal changes, merged within 17 hours, indicating smooth review and low complexity.

Summary

Migrate link-button to rumext modern syntax

Update link-button component to use modern rumext syntax, improving code consistency and maintainability.

Health Assessment

• • The PR was merged after a relatively long cycle time, but the changes are focused and well-contained, indicating a low-risk refactor.

Summary

Secure outbound HTTP requests and restrict asset access

Improves security by preventing SSRF attacks and ensuring only authorized users can access assets, reducing risk of data exposure.

Health Assessment

• • Security-focused PR with large code changes and moderate review time; risk high due to potential impact on authentication and SSRF protection.

Summary

Use base64 envelope for Uint8Array task results

This change reduces memory usage and payload size for plugin task results, preventing critical memory issues in production.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and risk.

Summary

Add Nitrate Advanced Permissions Delete

Continues implementing Nitrate's advanced permissions by adding the ability to delete teams permission.

Health Assessment

• • The PR was reviewed and merged within a relatively short cycle time of 9.8 hours, indicating efficient review and approval processes.

Summary

Fix keep-alive interval leak in PluginBridge

The patch stops a memory leak that could degrade WebSocket performance. This ensures more reliable real-time collaboration for users.

Health Assessment

• • Quick resolution with minimal rework indicates a straightforward bug fix.

Summary

Refactor spiral rendering

Improves rendering performance and maintainability of spiral graphics for Penpot users.

Health Assessment

• • Single commit with moderate review time indicates a focused refactor; scope is medium with 167 lines across 5 files.

Summary

Stabilize interactive drag backbuffer crops

Improves stability of drag interactions in the WebAssembly rendering engine, reducing crashes and improving user experience.

Health Assessment

• • Quick fix with minimal changes, merged within hours, indicating low complexity and high confidence.

Summary

Extract TextEditorState from application state

This refactor moves the TextEditorState out of the main application state, improving modularity and simplifying state management for text editing features.

Health Assessment

• • The PR had a long review time and large code changes, but only a single commit and no review rounds, indicating a focused refactor that required careful review.

Summary

Add Nginx security headers

Enhances web application security by adding standard HTTP security headers to the Nginx configuration, reducing vulnerability to clickjacking, MIME sniffing, and other attacks.

Health Assessment

• • Fast cycle time and minimal review friction indicate a straightforward change with low risk.

Summary

Fix margin input error in UI

The patch addresses an internal error triggered by invalid margin inputs, ensuring the UI remains stable. This reduces user-facing crashes and improves overall reliability.

Health Assessment

• • The PR had a long review cycle, but the change is small and low risk.

Summary

Migrate text renderers to modern component syntax

Legacy text rendering components are migrated to modern syntax, reducing conversion overhead. This refactor improves performance and maintainability while preserving existing functionality.

Health Assessment

• • Single commit, quick review, no major blockers, smooth merge.

Summary

Update CONTRIBUTING

Updates contribution guidelines, tags, and linting configuration to improve consistency and code quality.

Health Assessment

• • Quick documentation update with minimal review and merge time.

Summary

Refactor viewport interest area for device pixel ratio

Adjusts rendering logic to account for device pixel ratio, ensuring consistent visual fidelity across devices.

Health Assessment

• • PR completed in a single commit with minimal review, indicating a straightforward refactor.

Summary

Update issue templates to include the issue type

Adds an issue type field to templates, enabling issue classification via type instead of labels and improving triage efficiency.

Health Assessment

• • Review was delayed (47.8h) but no rework was required; the PR involved a small documentation change and merged within 49.4h.

Summary

Bind ReplServer to localhost to prevent RCE

Prevents unauthenticated remote code execution by restricting the ReplServer to localhost, ensuring only local processes can invoke the /execute endpoint.

Health Assessment

• • Quick fix with minimal changes, merged within 12 hours, indicating low complexity and high confidence.

Summary

Improve nitrate checkout failure feedback on subscription

Enhances user experience by providing clear inline error messages during subscription checkout failures, reducing confusion and support tickets. Also improves error handling for post-payment activation failures.

Health Assessment

• • The PR required a single review after a 24‑hour delay, followed by a quick merge, indicating a straightforward change with minimal friction. The moderate scope and clear user‑impact focus suggest low to medium risk.

Summary

Revert ESC keypress closing plugins

This change prevents plugins from unintentionally closing when users press ESC, improving plugin stability and user experience.

Health Assessment

• • The PR involved a single small change to ClojureScript, with a long cycle time likely due to extended review or testing.

Summary

Refactor subscriptions page

Refactors the subscriptions page to improve code quality and maintainability. Fixes related bugs to ensure reliable subscription management for users.

Health Assessment

• • Quick turnaround with minimal review rounds indicates smooth integration.

Summary

Fix double-click navigation bug in nested layouts

This fix ensures that double-clicking a text element selected via Ctrl+click in nested layouts correctly enters edit mode instead of jumping to the parent, improving the design workflow.

Health Assessment

• • Fast turnaround with minimal changes indicates a straightforward bug fix.

Summary

Migrate debug components to modern syntax

This refactor modernizes debug overlay components, simplifying maintenance and improving developer experience for future feature development. It also ensures consistent naming conventions and reduces potential bugs in debug rendering.

Health Assessment

• • The PR was merged within 10 hours, indicating a straightforward refactor with minimal review friction and low risk to production.

Summary

Remove stray debug logs from dashboard invitations

This change removes stray debug logs from the dashboard invitations panel, improving developer experience by reducing console noise. No functional changes are introduced.

Health Assessment

• • Q
• • u
• • i
• • c
• • k
• •
• • f
• • i
• • x
• •
• • w
• • i
• • t
• • h
• •
• • m
• • i
• • n
• • i
• • m
• • a
• • l
• •
• • c
• • h
• • a
• • n
• • g
• • e
• • s
• • ,
• •
• • m
• • e
• • r
• • g
• • e
• • d
• •
• • w
• • i
• • t
• • h
• • i
• • n
• •
• • a
• •
• • d
• • a
• • y
• • ,
• •
• • i
• • n
• • d
• • i
• • c
• • a
• • t
• • i
• • n
• • g
• •
• • l
• • o
• • w
• •
• • r
• • i
• • s
• • k
• •
• • a
• • n
• • d
• •
• • e
• • f
• • f
• • i
• • c
• • i
• • e
• • n
• • t
• •
• • r
• • e
• • v
• • i
• • e
• • w
• • .

Summary

Migrate components/code-block to modern component syntax

Refactors legacy code-block component to modern syntax, improving maintainability without affecting user experience.

Health Assessment

• • Quick refactor with minimal changes, merged within the same day, indicating low risk and high confidence.

Summary

Migrate frame-preview to modern component syntax

Updates the frame preview component to modern syntax, enhancing code maintainability. No change to user-facing behavior.

Health Assessment

• • Quick refactor with minimal changes, merged within 11 hours, indicating smooth process.

Summary

Migrate debug icons-preview to modern component syntax

Updates legacy debug icon components to modern syntax without changing behavior, improving code maintainability.

Health Assessment

• • Merged within 11 hours, minimal changes, indicating efficient review and low risk.

Summary

Avoid opaque fill check in drag crop cache

Fixes rendering performance issue by removing unnecessary opaque fill check during drag crop operations, improving responsiveness.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Rename measurement and svg-defs components

Refactors components to align with rumext defc* convention for internal consistency.

Health Assessment

• • The PR was merged quickly with minimal review friction, indicating a well-structured and low-risk change.

Summary

Remove stray debug log from stroke row rendering

This change removes a stray debug log that was printing on every stroke row render, reducing console noise and improving performance. It cleans up the UI rendering path for better developer experience.

Health Assessment

• • Quick merge with minimal changes and no review comments indicates low risk and straightforward fix.

Summary

Fix typos in comments and docstrings

Corrects spelling errors in code comments and documentation, improving code readability and maintainability without affecting functionality.

Health Assessment

• • Quick cosmetic fix with minimal changes, merged within 16 hours, indicating low complexity and low risk.

Summary

Fix MCP cross-tab notification persistence

Ensures users see accurate MCP status across tabs, improving UX and reducing confusion.

Health Assessment

• • Quick fix with minimal changes, resolved a regression affecting cross-tab notifications.

Summary

Fix swapped analytics event names on MCP tab-switch dialog

Corrects swapped analytics event names for MCP tab-switch dialog, ensuring accurate tracking of user actions. Accurate metrics improve adoption dashboards and data-driven decisions.

Health Assessment

• • Quick resolution with minimal changes; no rework or comments.

Summary

Fix missing i18n key for aria-label

Adds missing translation key to prevent screen readers from announcing raw key strings. Improves accessibility for typography sidebar users.

Health Assessment

• • Quick fix with minimal changes, merged within 40 hours, indicating efficient review and low complexity.

Summary

Optimize drag event handling

Improves drag performance by caching hot paths and reducing unnecessary updates, leading to smoother user interactions and lower CPU usage.

Health Assessment

• • Fast cycle time of 23 hours and minimal rework indicate a straightforward performance improvement.

Summary

Migrate fontfaces and viewer thumbnails to modern syntax

Incremental migration of legacy UI components to modern syntax, removing per-render JS-to-Clojure props conversion overhead.

Health Assessment

• • The PR has a small scope with only 5 files changed and a cycle time of 136.7 hours, indicating a relatively straightforward review process.

Summary

Fix drag and drop cache eligibility rules

This patch corrects rendering artifacts for rotated and irregular shapes during drag‑and‑drop, ensuring visual fidelity and consistent performance across zoom levels.

Health Assessment

• • Merged within 3.3 hours with minimal changes, indicating a straightforward bug fix with low risk.

Summary

Fix invitation token handling on register

Corrects invitation token logic to prevent registration failures and improve user onboarding experience.

Health Assessment

• • Fast turnaround with minimal rework, indicating a straightforward bug fix.

Summary

Fix nitrate change org combo style

Corrects styling of organization combo box in Nitrate, improving UI consistency.

Health Assessment

• • Quick style fix merged within minutes, minimal review needed.

Summary

Fix nitrate activation modal not opening

Users can now see the Nitrate activation success modal after completing a Stripe subscription, improving onboarding flow.

Health Assessment

• • Quick fix with minimal changes, merged within 18 minutes, indicating low complexity and high confidence.

Summary

Enhance Events

Improved event handling for smoother user experience

Health Assessment

• • Fast cycle time and quick review turnaround indicate efficient collaboration