org.mvnpm.at.radix-ui:react-checkbox:1.2.2

[phillip-kruger]

mvnpm.org has automatically released the following artifact:

Group Id: org.mvnpm.at.radix-ui
Artifact Id: react-checkbox
Version: 1.2.2

This represent the NPM Package: @radix-ui/react-checkbox

Release has been done using the 21c6bb82-6194-4789-9b0e-888374757cd9 staging repo

[kid-scout]

Tech-Debt Audit — April 16, 2026

Roz filed 17 tech-debt issues today from a proactive code audit. These are separate from the current beta-blocker PR queue. Quick triage:

Potential Beta Risks (worth reviewing before May)

• org.mvnpm:has:1.0.3 #254 — Hardcoded Spotify client ID in source. Not a crash risk, but a real credential in a public repo that cannot be rotated without a code change. Low-urgency but worth a quick environment-variable refactor.
• org.mvnpm:function-bind:1.1.1 #253 — Infinite recursion on 401. Could crash the daemon in auth edge cases.
• org.mvnpm.at.babel:helper-define-polyfill-provider:0.4.2 #248 / org.mvnpm.at.babel:plugin-transform-template-literals:7.22.5 #240 — mpv socket calls have no timeout. Can deadlock playback permanently — buttons appear to work but audio is frozen. Beta users will hit this.
• org.mvnpm.at.babel:plugin-transform-unicode-sets-regex:7.22.5 #245 — GPIO busy flag not protected by try/finally. Buttons become permanently unresponsive after any exception. High-impact for beta.
• org.mvnpm.at.babel:plugin-transform-shorthand-properties:7.22.5 #239 — UnifiedStateManager thread safety. Concurrent API requests (companion app + physical buttons simultaneously) can corrupt state.
• org.mvnpm:babel-plugin-polyfill-corejs2:0.4.5 #246 — Flask dev server in production. Single-threaded; any slow operation blocks all other requests. Low-severity for F&F beta (5-10 users) but relevant.

Lower Priority (post-beta)

• org.mvnpm:resolve:1.22.4 #252 librespot no crash recovery watchdog
• org.mvnpm:lodash.debounce:4.0.8 #250 URL scheme validation
• org.mvnpm:esutils:2.0.3 #249 / org.mvnpm.at.babel:plugin-transform-unicode-regex:7.22.5 #243 API crash on malformed JSON (internal-only for beta)
• org.mvnpm.at.babel:plugin-transform-unicode-escapes:7.22.10 #244 stop_audio race on rapid track change
• org.mvnpm.at.babel:plugin-transform-unicode-property-regex:7.22.5 #242 SIGTERM cleanup
• org.mvnpm.at.babel:plugin-transform-sticky-regex:7.22.5 #241 partial download handling
• org.mvnpm.at.babel:plugin-transform-typeof-symbol:7.22.5 #238 silent no-ops in Flutter
• org.mvnpm.at.babel:plugin-transform-spread:7.22.5 #237 RangeError on track completion
• org.mvnpm.at.babel:plugin-transform-regenerator:7.22.10 #236 dynamic item type safety
• org.mvnpm:is-core-module:2.13.0 #251 Web build Wasm (web build not in beta scope)

Recommendation

The current focus should stay on clearing the existing PR review queue — that is the critical path. But #248 (mpv deadlock) and #245 (GPIO buttons dead after exception) are high enough severity that Roz should probably address them in parallel. If a beta user hits either of those, the device becomes unusable until restarted.

I can file a focused issue to track the beta-priority subset if that would help keep them visible.

---

Scout — April 16, 2026