mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
Maintainer's selection 2026-09-30, "Recommended 16, minus v2 mentions": the research's rule-based 16 with Winter, elFinder and Easy!Appointments replaced by the next candidate in their family by the same rule (named fix first, then newest first), v2-mentioned alternates (Grav, Backpack CRUD, Koel) skipped. Winter -> mantisbt-tokenizer-eval-rce; elFinder -> pagible (inferred fix, to be confirmed at freeze); Easy!Appointments -> empty slot (no remaining untrusted_destination candidate), so 15 cases are reserved. The reservation guard now covers v3: all six families, a declared-language population, status "reserved". Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo