WICG/webpackage Issues

Last updated Dec 22, 2024, 5:47:54 AM UTC.

This repository doesn't have the Priority: Eventually label that's used to mark an issue as triaged without giving it an SLO. Until that's added, this summary uses heuristics to guess if each issue has been triaged.

40 out-of-SLO untriaged issues

Untriaged

Try to triage issues within 7 days. [ More Info ]

Issue	Title	Within SLO	On maintainers' plates for	Time past SLO
#40	Allow linking to sub-packages instead of just including them	❌	7.7 years	7.7 years
#48	In links to packages, consider srcset-type mechanism	❌	7.7 years	7.7 years
#52	Look into Macaroons for cross-signing	❌	7.6 years	7.6 years
#86	Noting open W3C TAG legacy issues	❌	7.2 years	7.2 years
#141	Deal with clock skew	❌	6.8 years	6.8 years
#176	Node ecosystem might need to preserve using `file:` protocol	❌	6.7 years	6.7 years
#177	Internal referencing and internal only resources	❌	6.7 years	6.7 years
#221	Certificate chain in exchanges	❌	6.5 years	6.5 years
#236	Include a list of used permissions in signed part of bundles	❌	6.5 years	6.5 years
#253	Accept-Signature specifies a syntax that violates the ABNF for sh-param-list	❌	6.4 years	6.4 years
#289	Feature detection and Accept: application/signed-exchanges headers	❌	6.4 years	6.3 years
#314	Integrity record size limit is missing from b2 snapshot	❌	6.2 years	6.2 years
#322	Reserve a HTTP/2 Error Code in the Error Code Registry	❌	6.1 years	6.1 years
#324	Specify how intermediates should load Signed Exchanges with validityUrl	❌	6.1 years	6.1 years
#419	Spec review	❌	5.7 years	5.7 years
#431	Go: Avoid mutating (signedexchange.Exchange).Payload	❌	5.6 years	5.6 years
#432	Prevent fallback loop when publisher publishes invalid SXG	❌	5.6 years	5.6 years
#434	Spec makes it difficult to distinguish signed and unsigned parameters	❌	5.6 years	5.6 years
#462	dump-certurl and dump-signedexchange do not verify the dates of OCSP response	❌	5.4 years	5.4 years
#463	Document how the web relies on transport security	❌	5.4 years	5.4 years
#465	Write a Human Rights Considerations section	❌	5.4 years	5.4 years
#471	Consider removing or generalizing Accept-Signature identifiers	❌	5.4 years	5.4 years
#496	Provide a formal way for one bundle of JS Modules to optionally reuse already loaded modules from another bundle	❌	5.3 years	5.3 years
#507	Specs rely on expired versions of Structured Headers draft	❌	5.2 years	5.1 years
#528	file format detection	❌	5.1 years	5.1 years
#532	Bundle replay as alternative to 'Save Page As...'	❌	5.1 years	5.1 years
#544	Ensure watermarked signed bundles don't allow user ID transfer	❌	5 years	5 years
#555	loading spec: Content sniffing prevention steps are missing in Parsing b3 algorithm	❌	4.9 years	4.8 years
#564	go/signedexchange: gen-certurl should fail on invalid OCSP	❌	4.7 years	4.7 years
#575	Supporting TWAs and like cases	❌	4.7 years	4.6 years
#585	Demote `validity-url` to optional	❌	4.5 years	4.5 years
#600	Updating a SXG via validity-url forces content negotiation on servers	❌	4.2 years	4.2 years
#602	Signed-Headers or Signed-Fields	❌	4.2 years	4.2 years
#675	Serve https://publisher directly from an edge node?	❌	3.3 years	3.3 years
#747	Clarify how `<script type=webbundle>` affects speculative HTML parsing.	❌	2.6 years	2.6 years
#839	Function signature change: reading all bytes from a stream	❌	2 years	2 years
#840	Convert from zip to web pack / bundle format online	❌	2 years	2 years
#870	Support offline	❌	1.6 years	1.6 years
#885	Normative references to discontinued specs in Loading Signed Exchanges	❌	1 year	1 year
#898	Bump golang.org/x/crypto from 0.21.0 to 0.31.0	❌	1.5 weeks	3 days