5986026abde0db04fda48185b30ecb4f28f36eac
The override "elliptic": ">=6.6.1" was added in PR #26 to address GHSA-848j-6mx2-7j84 (CVE-2025-14505), but it is a no-op because elliptic@6.6.1 IS the vulnerable version and no patched version exists. No upstream fix is available — elliptic@6.6.1 is the latest release. CTO decision: remove the no-op override, accept residual build-time risk. Dependency is build-time only and not shipped to production. Ref: PRI-1758, PRI-923
headlamp-argocd
A Headlamp plugin for ArgoCD visibility.
Monitors ArgoCD Applications, Rollouts, and health status. Read-only — no cluster write operations.
Installation
Install via Headlamp's built-in plugin installer (ArtifactHub):
# Install from Headlamp UI → Settings → Plugins → Add plugin
# Search for "argocd" or paste the ArtifactHub URL
Development
npm install
npm run build
npm test
Release
Releases are automated via the GitHub Actions release workflow:
gh workflow run Release --field version=0.1.0
License
Apache-2.0