From 210d48452a331941b0b12b05842b0bc3c77dc64e Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 16:15:37 +0200
Subject: [PATCH 01/26] expanding github rate limit error message that's being
 displayed in npmx

added retry config when trying to fetch github releases.
---
 app/components/Changelog/ErrorMsg.vue         | 24 +++++--
 app/components/Changelog/Releases.vue         |  2 +-
 .../package-changelog/[[org]]/[name].vue      | 16 +++--
 i18n/locales/bn-IN.json                       |  6 +-
 i18n/locales/cs-CZ.json                       |  6 +-
 i18n/locales/de.json                          |  6 +-
 i18n/locales/en.json                          | 10 ++-
 i18n/locales/es.json                          |  6 +-
 i18n/locales/fr-FR.json                       |  6 +-
 i18n/locales/it-IT.json                       |  6 +-
 i18n/locales/ja-JP.json                       |  6 +-
 i18n/locales/ko-KR.json                       |  6 +-
 i18n/locales/nb-NO.json                       |  6 +-
 i18n/locales/ne-NP.json                       |  6 +-
 i18n/locales/nl.json                          |  8 ++-
 i18n/locales/ru-RU.json                       |  6 +-
 i18n/locales/tr-TR.json                       |  6 +-
 .../releases/[provider]/[owner]/[repo].get.ts | 70 ++++++++++++-------
 server/utils/changelog/detectChangelog.ts     |  5 ++
 19 files changed, 141 insertions(+), 66 deletions(-)

diff --git a/app/components/Changelog/ErrorMsg.vue b/app/components/Changelog/ErrorMsg.vue
index 901e846696..177005815b 100644
--- a/app/components/Changelog/ErrorMsg.vue
+++ b/app/components/Changelog/ErrorMsg.vue
@@ -1,16 +1,30 @@
 <script setup lang="ts">
-const { pkgName, changelogLink, viewOnGit } = defineProps<{
+import type { NuxtError } from 'nuxt/app'
+const { pkgName, changelogLink, viewOnGit, error } = defineProps<{
   pkgName?: string
   changelogLink: string
   viewOnGit: string
+  error?: NuxtError
 }>()
 </script>
 
 <template>
   <div class="w-full flex items-center flex-col gap-2 mt-4">
-    <p>{{ $t('changelog.error.p1', { package: pkgName }) }}</p>
-    <i18n-t keypath="changelog.error.p2" tag="p" #viewon>
-      <LinkBase :to="changelogLink" class="lowercase">{{ viewOnGit }}</LinkBase>
-    </i18n-t>
+    <template v-if="error?.message == ERROR_UNGH_API_KEY_EXHAUSTED || true">
+      <p>{{ $t('changelog.ungh.rate_limit') }}</p>
+      <p>{{ $t('changelog.ungh.hint') }}</p>
+      <LinkBase
+        variant="button-secondary"
+        to="https://github.com/apps/ungh-app"
+        classicon="i-simple-icons:github"
+        >{{ $t('changelog.ungh.install') }}</LinkBase
+      >
+    </template>
+    <template v-else>
+      <p>{{ $t('changelog.error.p1', { package: pkgName }) }}</p>
+      <i18n-t keypath="changelog.error.p2" tag="p" #viewon>
+        <LinkBase :to="changelogLink" class="lowercase">{{ viewOnGit }}</LinkBase>
+      </i18n-t>
+    </template>
   </div>
 </template>
diff --git a/app/components/Changelog/Releases.vue b/app/components/Changelog/Releases.vue
index 117a9381b4..88974c33d8 100644
--- a/app/components/Changelog/Releases.vue
+++ b/app/components/Changelog/Releases.vue
@@ -93,5 +93,5 @@ prefetchComponents('ChangelogCard')
       :host="info.host"
     />
   </div>
-  <slot v-else-if="error" name="error"></slot>
+  <slot v-else-if="error" name="error" :error></slot>
 </template>
diff --git a/app/pages/package-changelog/[[org]]/[name].vue b/app/pages/package-changelog/[[org]]/[name].vue
index 73e4ad2a7a..73c2d20e00 100644
--- a/app/pages/package-changelog/[[org]]/[name].vue
+++ b/app/pages/package-changelog/[[org]]/[name].vue
@@ -155,12 +155,13 @@ defineOgImage(
         :requested-date="versionDate"
         :goToVersion="requestedVersion && version"
         :resolveVersionPending="resolvingPending"
-        #error
+        #error="{ error }"
       >
         <LazyChangelogErrorMsg
           :pkgName="pkg?.name"
           :changelog-link="changelog.link"
           :viewOnGit="viewOnProvider"
+          :error="error"
         />
       </LazyChangelogReleases>
       <LazyChangelogMarkdown
@@ -180,9 +181,16 @@ defineOgImage(
 
       <!-- error handling -->
       <template v-else-if="!changelogPending">
-        <p class="mt-5" v-if="changelogError?.statusMessage == ERROR_UNGH_API_KEY_EXHAUSTED">
-          {{ $t('changelog.rate_limit_ungh') }}
-        </p>
+        <template v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED">
+          <p class="mt-5">{{ $t('changelog.ungh.rate_limit') }}</p>
+          <p>{{ $t('changelog.ungh.hint') }}</p>
+          <LinkBase
+            variant="button-secondary"
+            to="https://github.com/apps/ungh-app"
+            classicon="i-simple-icons:github"
+            >{{ $t('changelog.ungh.install') }}</LinkBase
+          >
+        </template>
         <p class="mt-5" v-else-if="!version || !pkg?.versions[version]">
           {{ $t('changelog.version_unavailable') }}
         </p>
diff --git a/i18n/locales/bn-IN.json b/i18n/locales/bn-IN.json
index 09fb25ab7a..ee5e005ea2 100644
--- a/i18n/locales/bn-IN.json
+++ b/i18n/locales/bn-IN.json
@@ -1851,7 +1851,9 @@
       "p1": "দুঃখিত, {package}-এর চেঞ্জলগ লোড করা যায়নি",
       "p2": "অনুগ্রহ করে পরে আবার চেষ্টা করুন বা {viewon} দেখুন"
     },
-    "rate_limit_ungh": "দুঃখিত, GitHub-এর রেট লিমিট শেষ হয়ে গেছে, একটু পরে আবার চেষ্টা করুন",
-    "version_unavailable": "অনুরোধকৃত ভার্সনটি উপলব্ধ নয়।"
+    "version_unavailable": "অনুরোধকৃত ভার্সনটি উপলব্ধ নয়।",
+    "ungh": {
+      "rate_limit": "দুঃখিত, GitHub-এর রেট লিমিট শেষ হয়ে গেছে, একটু পরে আবার চেষ্টা করুন"
+    }
   }
 }
diff --git a/i18n/locales/cs-CZ.json b/i18n/locales/cs-CZ.json
index bf39beef84..0c3f28ea0e 100644
--- a/i18n/locales/cs-CZ.json
+++ b/i18n/locales/cs-CZ.json
@@ -1781,7 +1781,9 @@
       "p1": "Omlouváme se, seznam změn pro {package} nelze načíst",
       "p2": "Zkuste to prosím později nebo {viewon}"
     },
-    "rate_limit_ungh": "Omlouváme se, byl dosažen limit GitHubu, zkuste to prosím za chvíli znovu",
-    "version_unavailable": "Omlouváme se, požadovaná verze není k dispozici."
+    "version_unavailable": "Omlouváme se, požadovaná verze není k dispozici.",
+    "ungh": {
+      "rate_limit": "Omlouváme se, byl dosažen limit GitHubu, zkuste to prosím za chvíli znovu"
+    }
   }
 }
diff --git a/i18n/locales/de.json b/i18n/locales/de.json
index 7263064ef2..ccecb2a2d7 100644
--- a/i18n/locales/de.json
+++ b/i18n/locales/de.json
@@ -1731,7 +1731,9 @@
       "p1": "Leider konnte das Änderungsprotokoll für {package} nicht geladen werden",
       "p2": "Bitte versuche es später noch einmal oder {viewon}"
     },
-    "rate_limit_ungh": "Entschuldigung, die Zugriffsbeschränkung von GitHub wurde erreicht. Bitte versuche es in einem Moment erneut.",
-    "version_unavailable": "Die gewünschte Version ist nicht verfügbar."
+    "version_unavailable": "Die gewünschte Version ist nicht verfügbar.",
+    "ungh": {
+      "rate_limit": "Entschuldigung, die Zugriffsbeschränkung von GitHub wurde erreicht. Bitte versuche es in einem Moment erneut."
+    }
   }
 }
diff --git a/i18n/locales/en.json b/i18n/locales/en.json
index be82c218aa..9d16a2efdf 100644
--- a/i18n/locales/en.json
+++ b/i18n/locales/en.json
@@ -686,7 +686,7 @@
     "timeline": {
       "load_more": "Load more",
       "load_error": "Failed to load timeline. Please try again later.",
-      "no_stable_versions": "No stable versions to show. Turn off \u201cstable only\u201d to include pre-releases.",
+      "no_stable_versions": "No stable versions to show. Turn off “stable only” to include pre-releases.",
       "size_increase": "Install size increased by {percent}% ({size})",
       "size_decrease": "Install size decreased by {percent}% ({size})",
       "dep_increase": "{count} dependency added | {count} dependencies added",
@@ -1928,8 +1928,12 @@
       "p1": "Sorry, the changelog for {package} couldn't be loaded",
       "p2": "Please try again later or {viewon}"
     },
-    "rate_limit_ungh": "Sorry, Github's rate limit has been hit, try again in a moment",
     "version_unavailable": "The requested version is not available.",
-    "copy_as_markdown": "Copy changelog as Markdown"
+    "copy_as_markdown": "Copy changelog as Markdown",
+    "ungh": {
+      "rate_limit": "Sorry, Github's rate limit has been hit, try again in a moment",
+      "hint": "You can help increase the rate limit quota by installing the UNGH GitHub app",
+      "install": "Install UNGH GitHub app"
+    }
   }
 }
diff --git a/i18n/locales/es.json b/i18n/locales/es.json
index 3e0823d806..c93d9009f9 100644
--- a/i18n/locales/es.json
+++ b/i18n/locales/es.json
@@ -1852,7 +1852,9 @@
       "p1": "Lo sentimos, no se pudo cargar el registro de cambios de {package}",
       "p2": "Inténtalo de nuevo más tarde o {viewon}"
     },
-    "rate_limit_ungh": "Lo sentimos, se alcanzó el límite de tasa de GitHub, inténtalo de nuevo en un momento",
-    "version_unavailable": "La versión solicitada no está disponible."
+    "version_unavailable": "La versión solicitada no está disponible.",
+    "ungh": {
+      "rate_limit": "Lo sentimos, se alcanzó el límite de tasa de GitHub, inténtalo de nuevo en un momento"
+    }
   }
 }
diff --git a/i18n/locales/fr-FR.json b/i18n/locales/fr-FR.json
index 564ff38de0..f0aec0df15 100644
--- a/i18n/locales/fr-FR.json
+++ b/i18n/locales/fr-FR.json
@@ -1777,7 +1777,9 @@
       "p1": "Désolé, les changements de {package} n'ont pas pu être chargés",
       "p2": "Veuillez réessayer plus tard ou {viewon}"
     },
-    "rate_limit_ungh": "Désolé, la limite de requêtes à l'API GitHub a été atteinte, réessayez plus tard",
-    "version_unavailable": "La version demandée n'est pas disponible."
+    "version_unavailable": "La version demandée n'est pas disponible.",
+    "ungh": {
+      "rate_limit": "Désolé, la limite de requêtes à l'API GitHub a été atteinte, réessayez plus tard"
+    }
   }
 }
diff --git a/i18n/locales/it-IT.json b/i18n/locales/it-IT.json
index 3a77b0f36b..8e1fb357db 100644
--- a/i18n/locales/it-IT.json
+++ b/i18n/locales/it-IT.json
@@ -1696,7 +1696,9 @@
       "p1": "Spiacenti, il changelog per {package} non ha potuto essere caricato",
       "p2": "Riprova più tardi o {viewon}"
     },
-    "rate_limit_ungh": "Spiacenti, è stato raggiunto il limite di richieste di GitHub. Riprova tra un momento.",
-    "version_unavailable": "La versione richiesta non è disponibile."
+    "version_unavailable": "La versione richiesta non è disponibile.",
+    "ungh": {
+      "rate_limit": "Spiacenti, è stato raggiunto il limite di richieste di GitHub. Riprova tra un momento."
+    }
   }
 }
diff --git a/i18n/locales/ja-JP.json b/i18n/locales/ja-JP.json
index c63ebbb91f..5c20b0bbc5 100644
--- a/i18n/locales/ja-JP.json
+++ b/i18n/locales/ja-JP.json
@@ -1844,7 +1844,9 @@
       "p1": "{package} のchangelogを読み込めませんでした",
       "p2": "後でもう一度試すか、{viewon} を確認してください"
     },
-    "rate_limit_ungh": "GitHubのレート制限に達しました。しばらくしてから再度試してください。",
-    "version_unavailable": "リクエストされたバージョンは利用できません。"
+    "version_unavailable": "リクエストされたバージョンは利用できません。",
+    "ungh": {
+      "rate_limit": "GitHubのレート制限に達しました。しばらくしてから再度試してください。"
+    }
   }
 }
diff --git a/i18n/locales/ko-KR.json b/i18n/locales/ko-KR.json
index ada2c1bb7b..d100fd4711 100644
--- a/i18n/locales/ko-KR.json
+++ b/i18n/locales/ko-KR.json
@@ -1877,8 +1877,10 @@
       "p1": "죄송합니다. {package}의 변경 기록을 불러올 수 없습니다",
       "p2": "나중에 다시 시도하거나 {viewon}"
     },
-    "rate_limit_ungh": "죄송합니다. GitHub 요청 제한에 도달했습니다. 잠시 후 다시 시도하세요",
     "version_unavailable": "요청한 버전을 사용할 수 없습니다.",
-    "copy_as_markdown": "변경 로그를 Markdown으로 복사"
+    "copy_as_markdown": "변경 로그를 Markdown으로 복사",
+    "ungh": {
+      "rate_limit": "죄송합니다. GitHub 요청 제한에 도달했습니다. 잠시 후 다시 시도하세요"
+    }
   }
 }
diff --git a/i18n/locales/nb-NO.json b/i18n/locales/nb-NO.json
index a54ec9667f..12d6938f3e 100644
--- a/i18n/locales/nb-NO.json
+++ b/i18n/locales/nb-NO.json
@@ -1781,7 +1781,9 @@
       "p1": "Beklager, endringsloggen for {package} kunne ikke lastes",
       "p2": "Prøv igjen senere eller {viewon}"
     },
-    "rate_limit_ungh": "Beklager, GitHubs rate limit er nådd, prøv igjen om et øyeblikk",
-    "version_unavailable": "Den forespurte versjonen er ikke tilgjengelig."
+    "version_unavailable": "Den forespurte versjonen er ikke tilgjengelig.",
+    "ungh": {
+      "rate_limit": "Beklager, GitHubs rate limit er nådd, prøv igjen om et øyeblikk"
+    }
   }
 }
diff --git a/i18n/locales/ne-NP.json b/i18n/locales/ne-NP.json
index 6d4bed6b15..e1ec4b7d11 100644
--- a/i18n/locales/ne-NP.json
+++ b/i18n/locales/ne-NP.json
@@ -1853,7 +1853,9 @@
       "p1": "माफ गर्नुहोस्, {package} को चेन्जलग लोड गर्न सकिएन",
       "p2": "कृपया पछि फेरि प्रयास गर्नुहोस् वा {viewon}"
     },
-    "rate_limit_ungh": "माफ गर्नुहोस्, GitHub को रेट लिमिटमा पुगियो, एकैछिनमा फेरि प्रयास गर्नुहोस्",
-    "version_unavailable": "अनुरोध गरिएको संस्करण उपलब्ध छैन।"
+    "version_unavailable": "अनुरोध गरिएको संस्करण उपलब्ध छैन।",
+    "ungh": {
+      "rate_limit": "माफ गर्नुहोस्, GitHub को रेट लिमिटमा पुगियो, एकैछिनमा फेरि प्रयास गर्नुहोस्"
+    }
   }
 }
diff --git a/i18n/locales/nl.json b/i18n/locales/nl.json
index 0252910cea..c9dee41608 100644
--- a/i18n/locales/nl.json
+++ b/i18n/locales/nl.json
@@ -1864,8 +1864,12 @@
       "p1": "Sorry, de wijzigingenoverzicht van {package} kon niet geladen worden.",
       "p2": "Probeer later opnieuw of {viewon}"
     },
-    "rate_limit_ungh": "Sorry, de opvraaglimiet (rate limit) van GitHub is bereikt. Probeer het over een ogenblik opnieuw.",
     "version_unavailable": "De gevraagde is niet beschikbaar.",
-    "copy_as_markdown": "Kopieer wijzigingen als Markdown"
+    "copy_as_markdown": "Kopieer wijzigingen als Markdown",
+    "ungh": {
+      "rate_limit": "Sorry, de opvraaglimiet (rate limit) van GitHub is bereikt. Probeer het later opnieuw.",
+      "hint": "U kunt helpen de opvraaglimiet te verhogen door de UNGH GitHub-app te installeren.",
+      "install": "Installeer UNGH GitHub-app"
+    }
   }
 }
diff --git a/i18n/locales/ru-RU.json b/i18n/locales/ru-RU.json
index 5ae881cca3..e8991c17bc 100644
--- a/i18n/locales/ru-RU.json
+++ b/i18n/locales/ru-RU.json
@@ -1861,7 +1861,9 @@
       "p1": "Не удалось загрузить список изменений для пакета {package}",
       "p2": "Пожалуйста, попробуйте позже или {viewon}"
     },
-    "rate_limit_ungh": "К сожалению, достигнут лимит запросов GitHub. Попробуйте снова через некоторое время.",
-    "version_unavailable": "Запрошенная версия недоступна."
+    "version_unavailable": "Запрошенная версия недоступна.",
+    "ungh": {
+      "rate_limit": "К сожалению, достигнут лимит запросов GitHub. Попробуйте снова через некоторое время."
+    }
   }
 }
diff --git a/i18n/locales/tr-TR.json b/i18n/locales/tr-TR.json
index be24977204..8a32f98fbc 100644
--- a/i18n/locales/tr-TR.json
+++ b/i18n/locales/tr-TR.json
@@ -1725,7 +1725,9 @@
       "p1": "Üzgünüz, {package} için değişiklik günlüğü yüklenemedi",
       "p2": "Lütfen daha sonra tekrar deneyin veya {viewon}"
     },
-    "rate_limit_ungh": "Üzgünüz, GitHub'ın istek limiti aşıldı, bir süre sonra tekrar deneyin",
-    "version_unavailable": "İstenen sürüm mevcut değil."
+    "version_unavailable": "İstenen sürüm mevcut değil.",
+    "ungh": {
+      "rate_limit": "Üzgünüz, GitHub'ın istek limiti aşıldı, bir süre sonra tekrar deneyin"
+    }
   }
 }
diff --git a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
index 9737803d41..f04e77a1b8 100644
--- a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
+++ b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
@@ -1,6 +1,7 @@
 import type { ProviderId } from '~~/shared/utils/git-providers'
 import type { ReleaseData } from '~~/shared/types/changelog'
 import * as v from 'valibot'
+import { FetchError } from 'ofetch'
 import {
   ERROR_CHANGELOG_RELEASES_FAILED,
   ERROR_THROW_INCOMPLETE_PARAM,
@@ -86,33 +87,48 @@ export default defineCachedEventHandler(
 )
 
 async function getReleasesFromGithub(owner: string, repo: string) {
-  const data = await $fetch(`https://ungh.cc/repos/${owner}/${repo}/releases`, {
-    headers: {
-      'Accept': '*/*',
-      'User-Agent': 'npmx.dev',
-    },
-    timeout: TIMEOUT_TIME,
-  })
-
-  const { releases } = v.parse(GithubReleaseCollectionSchama, data)
-
-  const render = await changelogRenderer(createGithubRepoInfo(owner, repo))
-
-  return releases.map(r => {
-    const { html, toc } = render(r.markdown, r.id)
-    return {
-      id: r.id,
-      // replace single \n within <p> like with Vue's releases
-      html: html?.replace(/(?<!>)\n/g, '<br>') ?? null,
-      title: r.name || r.tag,
-      draft: r.draft,
-      prerelease: r.prerelease,
-      toc,
-      publishedAt: r.publishedAt,
-      link: `https://github.com/${owner}/${repo}/releases/tag/${r.tag}`,
-      tag: r.tag,
-    } satisfies ReleaseData
-  })
+  try {
+    const data = await $fetch(`https://ungh.cc/repos/${owner}/${repo}/releases`, {
+      headers: {
+        'Accept': '*/*',
+        'User-Agent': 'npmx.dev',
+      },
+      // with 403/429, the specific token from ungh could be exhausted, so we retry in case a different one does work
+      retryDelay: 300,
+      retry: 3,
+      // only 403 has been added, others status codes are defaults from ofetch
+      retryStatusCodes: [403, 408, 409, 425, 429, 500, 502, 503, 504],
+      timeout: TIMEOUT_TIME,
+    })
+
+    const { releases } = v.parse(GithubReleaseCollectionSchama, data)
+
+    const render = await changelogRenderer(createGithubRepoInfo(owner, repo))
+
+    return releases.map(r => {
+      const { html, toc } = render(r.markdown, r.id)
+      return {
+        id: r.id,
+        // replace single \n within <p> like with Vue's releases
+        html: html?.replace(/(?<!>)\n/g, '<br>') ?? null,
+        title: r.name || r.tag,
+        draft: r.draft,
+        prerelease: r.prerelease,
+        toc,
+        publishedAt: r.publishedAt,
+        link: `https://github.com/${owner}/${repo}/releases/tag/${r.tag}`,
+        tag: r.tag,
+      } satisfies ReleaseData
+    })
+  } catch (error) {
+    if (error instanceof FetchError && (error.statusCode == 403 || error.statusCode == 429)) {
+      throw createError({
+        statusCode: 502,
+        message: ERROR_UNGH_API_KEY_EXHAUSTED,
+      })
+    }
+    throw error
+  }
 }
 
 async function getReleasesFromForgejo(owner: string, repo: string, host: string) {
diff --git a/server/utils/changelog/detectChangelog.ts b/server/utils/changelog/detectChangelog.ts
index 148142ec63..f19001cb1a 100644
--- a/server/utils/changelog/detectChangelog.ts
+++ b/server/utils/changelog/detectChangelog.ts
@@ -150,6 +150,11 @@ async function checkLatestGithubRelease(
         headers: {
           'User-Agent': 'npmx.dev',
         },
+        // with 403/429, the specific token from ungh could be exhausted, so we retry in case a different one does work
+        retryDelay: 300,
+        retry: 3,
+        // only 403 has been added, others status codes are defaults from ofetch
+        retryStatusCodes: [403, 408, 409, 425, 429, 500, 502, 503, 504],
       },
     )
 

From 52e914fcfc46f104226a3b2a1693c4ee41a84468 Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 16:43:02 +0200
Subject: [PATCH 02/26] adding empty space between import and defining props
 for better read ability

---
 app/components/Changelog/ErrorMsg.vue | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/components/Changelog/ErrorMsg.vue b/app/components/Changelog/ErrorMsg.vue
index 177005815b..ae105d3f1b 100644
--- a/app/components/Changelog/ErrorMsg.vue
+++ b/app/components/Changelog/ErrorMsg.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import type { NuxtError } from 'nuxt/app'
+
 const { pkgName, changelogLink, viewOnGit, error } = defineProps<{
   pkgName?: string
   changelogLink: string

From 96666ff6ed903e73a04af10b3b863d027f734351 Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 16:46:22 +0200
Subject: [PATCH 03/26] removing debugging `|| true`

---
 app/components/Changelog/ErrorMsg.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/components/Changelog/ErrorMsg.vue b/app/components/Changelog/ErrorMsg.vue
index ae105d3f1b..dfed2c0f9f 100644
--- a/app/components/Changelog/ErrorMsg.vue
+++ b/app/components/Changelog/ErrorMsg.vue
@@ -11,7 +11,7 @@ const { pkgName, changelogLink, viewOnGit, error } = defineProps<{
 
 <template>
   <div class="w-full flex items-center flex-col gap-2 mt-4">
-    <template v-if="error?.message == ERROR_UNGH_API_KEY_EXHAUSTED || true">
+    <template v-if="error?.message == ERROR_UNGH_API_KEY_EXHAUSTED">
       <p>{{ $t('changelog.ungh.rate_limit') }}</p>
       <p>{{ $t('changelog.ungh.hint') }}</p>
       <LinkBase

From c77d7b4b31e5d068e95712a783cf0b48100d28c5 Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 16:52:21 +0200
Subject: [PATCH 04/26] updated i18n schema

---
 i18n/schema.json | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/i18n/schema.json b/i18n/schema.json
index 7aaf90c42a..bae85b0456 100644
--- a/i18n/schema.json
+++ b/i18n/schema.json
@@ -5788,14 +5788,26 @@
           },
           "additionalProperties": false
         },
-        "rate_limit_ungh": {
-          "type": "string"
-        },
         "version_unavailable": {
           "type": "string"
         },
         "copy_as_markdown": {
           "type": "string"
+        },
+        "ungh": {
+          "type": "object",
+          "properties": {
+            "rate_limit": {
+              "type": "string"
+            },
+            "hint": {
+              "type": "string"
+            },
+            "install": {
+              "type": "string"
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false

From f630e03d1f0aa1ef98e955a3479ef56d7648188d Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 17:16:31 +0200
Subject: [PATCH 05/26] message -> statusText

---
 app/components/Changelog/ErrorMsg.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/components/Changelog/ErrorMsg.vue b/app/components/Changelog/ErrorMsg.vue
index dfed2c0f9f..1980938f97 100644
--- a/app/components/Changelog/ErrorMsg.vue
+++ b/app/components/Changelog/ErrorMsg.vue
@@ -11,7 +11,7 @@ const { pkgName, changelogLink, viewOnGit, error } = defineProps<{
 
 <template>
   <div class="w-full flex items-center flex-col gap-2 mt-4">
-    <template v-if="error?.message == ERROR_UNGH_API_KEY_EXHAUSTED">
+    <template v-if="error?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED">
       <p>{{ $t('changelog.ungh.rate_limit') }}</p>
       <p>{{ $t('changelog.ungh.hint') }}</p>
       <LinkBase

From 4697f943dfd50b07603c9a7b1c4ac01dd8fb558c Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sun, 4 Oct 2026 17:56:28 +0200
Subject: [PATCH 06/26] using statusText to throw 502

---
 server/api/changelog/releases/[provider]/[owner]/[repo].get.ts | 2 +-
 server/utils/changelog/detectChangelog.ts                      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
index f04e77a1b8..40fba9de6c 100644
--- a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
+++ b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
@@ -124,7 +124,7 @@ async function getReleasesFromGithub(owner: string, repo: string) {
     if (error instanceof FetchError && (error.statusCode == 403 || error.statusCode == 429)) {
       throw createError({
         statusCode: 502,
-        message: ERROR_UNGH_API_KEY_EXHAUSTED,
+        statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
       })
     }
     throw error
diff --git a/server/utils/changelog/detectChangelog.ts b/server/utils/changelog/detectChangelog.ts
index f19001cb1a..32c13f700c 100644
--- a/server/utils/changelog/detectChangelog.ts
+++ b/server/utils/changelog/detectChangelog.ts
@@ -211,7 +211,7 @@ async function checkLatestGithubRelease(
           null,
           createError({
             statusCode: 502,
-            statusMessage: ERROR_UNGH_API_KEY_EXHAUSTED,
+            statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
           }),
         ]
       }

From 892f0890490272443e3c7bff847240b5f486f7b9 Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sat, 10 Oct 2026 19:12:23 +0200
Subject: [PATCH 07/26] doubling up with message for ungh 502 to hopefully make
 the rabbit happy

---
 server/api/changelog/releases/[provider]/[owner]/[repo].get.ts | 1 +
 server/utils/changelog/detectChangelog.ts                      | 1 +
 2 files changed, 2 insertions(+)

diff --git a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
index 40fba9de6c..170673325b 100644
--- a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
+++ b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
@@ -124,6 +124,7 @@ async function getReleasesFromGithub(owner: string, repo: string) {
     if (error instanceof FetchError && (error.statusCode == 403 || error.statusCode == 429)) {
       throw createError({
         statusCode: 502,
+        message: ERROR_UNGH_API_KEY_EXHAUSTED,
         statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
       })
     }
diff --git a/server/utils/changelog/detectChangelog.ts b/server/utils/changelog/detectChangelog.ts
index 7037521137..8700d9a028 100644
--- a/server/utils/changelog/detectChangelog.ts
+++ b/server/utils/changelog/detectChangelog.ts
@@ -263,6 +263,7 @@ async function checkLatestGithubRelease(
       if (e.statusCode === 403 || e.statusCode === 429) {
         throw createError({
           statusCode: 502,
+          message: ERROR_UNGH_API_KEY_EXHAUSTED,
           statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
         })
       }

From 953648cee1ec0af1a70f02871f88be465de9d84c Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sat, 10 Oct 2026 22:21:59 +0200
Subject: [PATCH 08/26] changed statusText to statusMessage and added classed
 to have the ungh message centered

---
 app/pages/package-changelog/[[org]]/[name].vue                | 4 ++--
 .../api/changelog/releases/[provider]/[owner]/[repo].get.ts   | 2 +-
 server/utils/changelog/detectChangelog.ts                     | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/pages/package-changelog/[[org]]/[name].vue b/app/pages/package-changelog/[[org]]/[name].vue
index 73c2d20e00..fdbbcd0e6c 100644
--- a/app/pages/package-changelog/[[org]]/[name].vue
+++ b/app/pages/package-changelog/[[org]]/[name].vue
@@ -181,7 +181,7 @@ defineOgImage(
 
       <!-- error handling -->
       <template v-else-if="!changelogPending">
-        <template v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED">
+        <div v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED" class="items-center flex flec-col">
           <p class="mt-5">{{ $t('changelog.ungh.rate_limit') }}</p>
           <p>{{ $t('changelog.ungh.hint') }}</p>
           <LinkBase
@@ -190,7 +190,7 @@ defineOgImage(
             classicon="i-simple-icons:github"
             >{{ $t('changelog.ungh.install') }}</LinkBase
           >
-        </template>
+        </div>
         <p class="mt-5" v-else-if="!version || !pkg?.versions[version]">
           {{ $t('changelog.version_unavailable') }}
         </p>
diff --git a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
index 170673325b..30fbcc3bab 100644
--- a/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
+++ b/server/api/changelog/releases/[provider]/[owner]/[repo].get.ts
@@ -125,7 +125,7 @@ async function getReleasesFromGithub(owner: string, repo: string) {
       throw createError({
         statusCode: 502,
         message: ERROR_UNGH_API_KEY_EXHAUSTED,
-        statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
+        statusMessage: ERROR_UNGH_API_KEY_EXHAUSTED,
       })
     }
     throw error
diff --git a/server/utils/changelog/detectChangelog.ts b/server/utils/changelog/detectChangelog.ts
index 8700d9a028..15193dceaf 100644
--- a/server/utils/changelog/detectChangelog.ts
+++ b/server/utils/changelog/detectChangelog.ts
@@ -264,7 +264,7 @@ async function checkLatestGithubRelease(
         throw createError({
           statusCode: 502,
           message: ERROR_UNGH_API_KEY_EXHAUSTED,
-          statusText: ERROR_UNGH_API_KEY_EXHAUSTED,
+          statusMessage: ERROR_UNGH_API_KEY_EXHAUSTED,
         })
       }
     }

From 199a709404f2bd96b270a91f9c84352016fd0f97 Mon Sep 17 00:00:00 2001
From: "autofix-ci[bot]" <114827586+autofix-ci[bot]@users.noreply.github.com>
Date: Sat, 10 Oct 2026 20:23:20 +0000
Subject: [PATCH 09/26] [autofix.ci] apply automated fixes

---
 app/pages/package-changelog/[[org]]/[name].vue | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/app/pages/package-changelog/[[org]]/[name].vue b/app/pages/package-changelog/[[org]]/[name].vue
index fdbbcd0e6c..44a536ca29 100644
--- a/app/pages/package-changelog/[[org]]/[name].vue
+++ b/app/pages/package-changelog/[[org]]/[name].vue
@@ -181,7 +181,10 @@ defineOgImage(
 
       <!-- error handling -->
       <template v-else-if="!changelogPending">
-        <div v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED" class="items-center flex flec-col">
+        <div
+          v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED"
+          class="items-center flex flec-col"
+        >
           <p class="mt-5">{{ $t('changelog.ungh.rate_limit') }}</p>
           <p>{{ $t('changelog.ungh.hint') }}</p>
           <LinkBase

From 27f6c884a465ce552c2d62a0b929c462daeb16f9 Mon Sep 17 00:00:00 2001
From: WilcoSp <wilcosp@hotmail.nl>
Date: Sat, 10 Oct 2026 22:31:21 +0200
Subject: [PATCH 10/26] fix typo

---
 app/pages/package-changelog/[[org]]/[name].vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/pages/package-changelog/[[org]]/[name].vue b/app/pages/package-changelog/[[org]]/[name].vue
index 44a536ca29..f233162a4e 100644
--- a/app/pages/package-changelog/[[org]]/[name].vue
+++ b/app/pages/package-changelog/[[org]]/[name].vue
@@ -183,7 +183,7 @@ defineOgImage(
       <template v-else-if="!changelogPending">
         <div
           v-if="changelogError?.statusText == ERROR_UNGH_API_KEY_EXHAUSTED"
-          class="items-center flex flec-col"
+          class="items-center flex flex-col"
         >
           <p class="mt-5">{{ $t('changelog.ungh.rate_limit') }}</p>
           <p>{{ $t('changelog.ungh.hint') }}</p>

From 5c5da65c518ab55b5c972e35ac418b7c280a77a2 Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@gmail.com>
Date: Sun, 11 Oct 2026 17:22:09 +0000
Subject: [PATCH 11/26] perf: only resolve trust downgrade status for resolved
 version (#3316)

---
 app/composables/npm/usePackage.ts             | 30 ++++----
 app/pages/package/[[org]]/[name].vue          | 17 +----
 app/utils/publish-security.ts                 | 13 +---
 shared/types/npm-registry.ts                  | 22 +++++-
 .../composables/use-package-transform.spec.ts | 70 +++++++++----------
 test/unit/app/utils/publish-security.spec.ts  | 40 +++++------
 6 files changed, 88 insertions(+), 104 deletions(-)

diff --git a/app/composables/npm/usePackage.ts b/app/composables/npm/usePackage.ts
index baae299150..7f16200f87 100644
--- a/app/composables/npm/usePackage.ts
+++ b/app/composables/npm/usePackage.ts
@@ -1,5 +1,6 @@
-import { getTrustLevel, getTrustStatus } from 'packumeta'
+import { getTrustStatus } from 'packumeta'
 import { normalizeLicense } from '#shared/utils/npm'
+import { detectSecurityDowngradeForVersion } from '~/utils/publish-security'
 
 /** Number of recent versions to include in initial payload */
 const RECENT_VERSIONS_COUNT = 5
@@ -37,21 +38,16 @@ export function transformPackument(
     includedVersions.add(requestedVersion)
   }
 
-  // Build security metadata for all versions, but only include in payload
-  // when the package has mixed trust levels (i.e. a downgrade could exist)
-  const securityVersionEntries = Object.entries(pkg.versions).map(([version, metadata]) => {
-    const trustStatus = getTrustStatus(metadata)
-    return {
-      version,
-      time: pkg.time[version],
-      trustStatus,
-      deprecated: metadata.deprecated,
-    }
-  })
-
-  const trustLevels = new Set(securityVersionEntries.map(v => getTrustLevel(v.trustStatus)))
-  const hasMixedTrust = trustLevels.size > 1
-  const securityVersions = hasMixedTrust ? securityVersionEntries : undefined
+  // Computed from the full version history so only the small result is serialized.
+  const securityVersionEntries = Object.entries(pkg.versions).map(([version, metadata]) => ({
+    version,
+    time: pkg.time[version],
+    trustStatus: getTrustStatus(metadata),
+    deprecated: metadata.deprecated,
+  }))
+  const publishSecurityDowngrade = requestedVersion
+    ? detectSecurityDowngradeForVersion(securityVersionEntries, requestedVersion)
+    : null
 
   // Build filtered versions object with install scripts info per version
   const filteredVersions: Record<string, SlimVersion> = {}
@@ -122,7 +118,7 @@ export function transformPackument(
     ...(storybook && { storybook }),
     'requestedVersion': versionData,
     'versions': filteredVersions,
-    'securityVersions': securityVersions,
+    'publishSecurityDowngrade': publishSecurityDowngrade,
   }
 }
 
diff --git a/app/pages/package/[[org]]/[name].vue b/app/pages/package/[[org]]/[name].vue
index ac88e3c315..5e9d496f1b 100644
--- a/app/pages/package/[[org]]/[name].vue
+++ b/app/pages/package/[[org]]/[name].vue
@@ -249,17 +249,6 @@ if (isSpaFallback.value || isHydratingWithServerContent.value) {
 }
 
 const displayVersion = computed(() => pkg.value?.requestedVersion ?? null)
-const versionSecurityMetadata = computed<PackageVersionInfo[]>(() => {
-  if (!pkg.value) return []
-  if (pkg.value.securityVersions?.length) return pkg.value.securityVersions
-
-  return Object.entries(pkg.value.versions).map(([version, metadata]) => ({
-    version,
-    time: pkg.value?.time?.[version],
-    trustStatus: metadata.trustStatus,
-    deprecated: metadata.deprecated,
-  }))
-})
 
 // Process package description
 const pkgDescription = useMarkdown(() => ({
@@ -332,11 +321,7 @@ const deprecationNoticeMessage = useMarkdown(() => ({
   text: deprecationNotice.value?.message ?? '',
 }))
 
-const publishSecurityDowngrade = computed(() => {
-  const currentVersion = displayVersion.value?.version
-  if (!currentVersion) return null
-  return detectPublishSecurityDowngradeForVersion(versionSecurityMetadata.value, currentVersion)
-})
+const publishSecurityDowngrade = computed(() => pkg.value?.publishSecurityDowngrade ?? null)
 
 const installVersionOverride = computed(
   () => publishSecurityDowngrade.value?.trustedVersion ?? null,
diff --git a/app/utils/publish-security.ts b/app/utils/publish-security.ts
index cf3e0c95f1..137465b0b5 100644
--- a/app/utils/publish-security.ts
+++ b/app/utils/publish-security.ts
@@ -1,15 +1,8 @@
 import { getTrustLevel, getTrustLevelName, type TrustLevelName } from 'packumeta'
 import { compare, getMajor } from 'verkit'
+import type { PublishSecurityDowngrade } from '#shared/types/npm-registry'
 
-export interface PublishSecurityDowngrade {
-  downgradedVersion: string
-  downgradedPublishedAt?: string
-  downgradedTrustLevel: TrustLevelName
-  /** Recommended trusted version within the same major, if one exists */
-  trustedVersion?: string
-  trustedPublishedAt?: string
-  trustedTrustLevel: TrustLevelName
-}
+export type { PublishSecurityDowngrade }
 
 type VersionWithIndex = PackageVersionInfo & {
   index: number
@@ -48,7 +41,7 @@ function sortByRecency(a: VersionWithIndex, b: VersionWithIndex): number {
  * A version is considered downgraded when it has no provenance and
  * there exists an older trusted release.
  */
-export function detectPublishSecurityDowngradeForVersion(
+export function detectSecurityDowngradeForVersion(
   versions: PackageVersionInfo[],
   viewedVersion: string,
 ): PublishSecurityDowngrade | null {
diff --git a/shared/types/npm-registry.ts b/shared/types/npm-registry.ts
index 46ec7caee1..d59f95e135 100644
--- a/shared/types/npm-registry.ts
+++ b/shared/types/npm-registry.ts
@@ -12,7 +12,7 @@ import type {
   Contact,
 } from '@npm/types'
 import type { ReadmeResponse } from './readme'
-import type { TrustStatus } from 'packumeta'
+import type { TrustLevelName, TrustStatus } from 'packumeta'
 
 // Re-export official npm types for packument/manifest
 export type { Manifest, ManifestVersion, PackageJSON } from '@npm/types'
@@ -91,8 +91,24 @@ export interface SlimPackument {
   'requestedVersion': SlimPackumentVersion | null
   /** Only includes dist-tag versions (with installScripts info added per version) */
   'versions': Record<string, SlimVersion>
-  /** Lightweight security metadata for all versions */
-  'securityVersions'?: PackageVersionInfo[]
+  /**
+   * Publish security downgrade for the requested version, or `null`.
+   * Computed server-side so the payload only carries the small result, not the full version history.
+   */
+  'publishSecurityDowngrade'?: PublishSecurityDowngrade | null
+}
+
+/**
+ * A publish-security downgrade detected for a specific viewed version.
+ */
+export interface PublishSecurityDowngrade {
+  downgradedVersion: string
+  downgradedPublishedAt?: string
+  downgradedTrustLevel: TrustLevelName
+  /** Recommended trusted version within the same major, if one exists */
+  trustedVersion?: string
+  trustedPublishedAt?: string
+  trustedTrustLevel: TrustLevelName
 }
 
 /**
diff --git a/test/nuxt/composables/use-package-transform.spec.ts b/test/nuxt/composables/use-package-transform.spec.ts
index a97e1bc0f8..20e3c13ffd 100644
--- a/test/nuxt/composables/use-package-transform.spec.ts
+++ b/test/nuxt/composables/use-package-transform.spec.ts
@@ -67,18 +67,6 @@ function createPackument(
   }
 }
 
-function toVersionInfos(packument: ReturnType<typeof transformPackument>): PackageVersionInfo[] {
-  return (
-    packument.securityVersions ??
-    Object.entries(packument.versions).map(([version, metadata]) => ({
-      version,
-      time: packument.time[version],
-      trustStatus: metadata.trustStatus,
-      deprecated: metadata.deprecated,
-    }))
-  )
-}
-
 describe('transformPackument', () => {
   it('includes requested old version and preserves provenance on it', () => {
     const packument = createPackument(
@@ -116,10 +104,11 @@ describe('transformPackument', () => {
     })
     expect(transformed.versions['1.0.1']).toBeUndefined()
     expect(transformed.versions['1.0.2']).toBeUndefined()
-    expect(transformed.securityVersions).toHaveLength(8)
+    // 1.0.0 is the oldest and trusted, so the viewed version is not a downgrade
+    expect(transformed.publishSecurityDowngrade).toBeNull()
   })
 
-  it('omits securityVersions when all versions have the same trust level', () => {
+  it('computes no downgrade when all versions have the same trust level', () => {
     const packument = createPackument(
       {
         '1.0.0': createVersion('1.0.0'),
@@ -138,11 +127,11 @@ describe('transformPackument', () => {
 
     const transformed = transformPackument(packument, '1.0.2')
 
-    // All versions have trustLevel 'none', so no mixed trust — omit the array
-    expect(transformed.securityVersions).toBeUndefined()
+    // All versions have trustLevel 'none', so nothing to detect
+    expect(transformed.publishSecurityDowngrade).toBeNull()
   })
 
-  it('includes securityVersions when package has mixed trust levels', () => {
+  it('detects a downgrade when the package has mixed trust levels', () => {
     const packument = createPackument(
       {
         '1.0.0': createVersion('1.0.0', true),
@@ -159,10 +148,17 @@ describe('transformPackument', () => {
 
     const transformed = transformPackument(packument, '1.0.1')
 
-    expect(transformed.securityVersions).toHaveLength(2)
+    expect(transformed.publishSecurityDowngrade).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'none',
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'provenance',
+    })
   })
 
-  it('works with downgrade detection for viewed version', () => {
+  it('computes the downgrade for the requested version only', () => {
     const packument = createPackument(
       {
         '1.0.0': createVersion('1.0.0', true),
@@ -179,11 +175,8 @@ describe('transformPackument', () => {
       '1.0.2',
     )
 
-    const transformed = transformPackument(packument, '1.0.1')
-    const infos = toVersionInfos(transformed)
-
-    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.2')).toBeNull()
-    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.1')).toEqual({
+    expect(transformPackument(packument, '1.0.2').publishSecurityDowngrade).toBeNull()
+    expect(transformPackument(packument, '1.0.1').publishSecurityDowngrade).toEqual({
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
       downgradedTrustLevel: 'none',
@@ -211,14 +204,13 @@ describe('transformPackument', () => {
     )
 
     const transformed = transformPackument(packument, '1.0.1')
-    const infos = toVersionInfos(transformed)
 
-    expect(infos.find(v => v.version === '1.0.0')?.trustStatus).toEqual({
+    expect(transformed.versions['1.0.0']?.trustStatus).toEqual({
       provenance: true,
       trustedPublisher: true,
       stagedPublish: false,
     })
-    expect(detectPublishSecurityDowngradeForVersion(infos, '1.0.1')?.trustedVersion).toBe('1.0.0')
+    expect(transformed.publishSecurityDowngrade?.trustedVersion).toBe('1.0.0')
   })
 
   it('prefers trustedPublisher trust level when both trustedPublisher and attestations exist', () => {
@@ -264,20 +256,19 @@ describe('transformPackument', () => {
     )
 
     const transformed = transformPackument(packument, '7.0.1')
-    const infos = toVersionInfos(transformed)
 
     // Both versions should be trustedPublisher — no downgrade
-    expect(infos.find(v => v.version === '7.0.0')?.trustStatus).toEqual({
+    expect(transformed.versions['7.0.0']?.trustStatus).toEqual({
       provenance: true,
       trustedPublisher: true,
       stagedPublish: false,
     })
-    expect(infos.find(v => v.version === '7.0.1')?.trustStatus).toEqual({
+    expect(transformed.versions['7.0.1']?.trustStatus).toEqual({
       provenance: true,
       trustedPublisher: true,
       stagedPublish: false,
     })
-    expect(detectPublishSecurityDowngradeForVersion(infos, '7.0.1')).toBeNull()
+    expect(transformed.publishSecurityDowngrade).toBeNull()
   })
 
   it('flags non-direct downgrade chain until trust is restored', () => {
@@ -301,12 +292,15 @@ describe('transformPackument', () => {
       '2.4.0',
     )
 
-    const transformed = transformPackument(packument, '2.3.0')
-    const infos = toVersionInfos(transformed)
-
-    expect(detectPublishSecurityDowngradeForVersion(infos, '2.1.1')?.trustedVersion).toBe('2.1.0')
-    expect(detectPublishSecurityDowngradeForVersion(infos, '2.2.0')?.trustedVersion).toBe('2.1.0')
-    expect(detectPublishSecurityDowngradeForVersion(infos, '2.3.0')?.trustedVersion).toBe('2.1.0')
-    expect(detectPublishSecurityDowngradeForVersion(infos, '2.4.0')).toBeNull()
+    expect(transformPackument(packument, '2.1.1').publishSecurityDowngrade?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(transformPackument(packument, '2.2.0').publishSecurityDowngrade?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(transformPackument(packument, '2.3.0').publishSecurityDowngrade?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(transformPackument(packument, '2.4.0').publishSecurityDowngrade).toBeNull()
   })
 })
diff --git a/test/unit/app/utils/publish-security.spec.ts b/test/unit/app/utils/publish-security.spec.ts
index 8c30c6f08e..20934c024b 100644
--- a/test/unit/app/utils/publish-security.spec.ts
+++ b/test/unit/app/utils/publish-security.spec.ts
@@ -1,7 +1,7 @@
 import { describe, expect, it } from 'vitest'
-import { detectPublishSecurityDowngradeForVersion } from '~/utils/publish-security'
+import { detectSecurityDowngradeForVersion } from '~/utils/publish-security'
 
-describe('detectPublishSecurityDowngradeForVersion', () => {
+describe('detectSecurityDowngradeForVersion', () => {
   const versions = [
     {
       version: '1.0.0',
@@ -21,12 +21,12 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   ]
 
   it('does not flag trusted viewed version (1.0.2)', () => {
-    const result = detectPublishSecurityDowngradeForVersion(versions, '1.0.2')
+    const result = detectSecurityDowngradeForVersion(versions, '1.0.2')
     expect(result).toBeNull()
   })
 
   it('flags downgraded viewed version (1.0.1)', () => {
-    const result = detectPublishSecurityDowngradeForVersion(versions, '1.0.1')
+    const result = detectSecurityDowngradeForVersion(versions, '1.0.1')
     expect(result).toEqual({
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
@@ -38,7 +38,7 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   })
 
   it('flags trust downgrade from trustedPublisher to provenance', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',
@@ -65,7 +65,7 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   })
 
   it('does not flag upgrade from provenance to trustedPublisher', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',
@@ -113,20 +113,20 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
       },
     ]
 
-    expect(
-      detectPublishSecurityDowngradeForVersion(downgradedVersions, '2.1.1')?.trustedVersion,
-    ).toBe('2.1.0')
-    expect(
-      detectPublishSecurityDowngradeForVersion(downgradedVersions, '2.2.0')?.trustedVersion,
-    ).toBe('2.1.0')
-    expect(
-      detectPublishSecurityDowngradeForVersion(downgradedVersions, '2.3.0')?.trustedVersion,
-    ).toBe('2.1.0')
-    expect(detectPublishSecurityDowngradeForVersion(downgradedVersions, '2.4.0')).toBeNull()
+    expect(detectSecurityDowngradeForVersion(downgradedVersions, '2.1.1')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectSecurityDowngradeForVersion(downgradedVersions, '2.2.0')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectSecurityDowngradeForVersion(downgradedVersions, '2.3.0')?.trustedVersion).toBe(
+      '2.1.0',
+    )
+    expect(detectSecurityDowngradeForVersion(downgradedVersions, '2.4.0')).toBeNull()
   })
 
   it('skips deprecated versions when selecting trustedVersion', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',
@@ -153,7 +153,7 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   })
 
   it('returns null when all older trusted versions are deprecated', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',
@@ -174,7 +174,7 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   })
 
   it('detects cross-major downgrade but does not recommend a version', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',
@@ -198,7 +198,7 @@ describe('detectPublishSecurityDowngradeForVersion', () => {
   })
 
   it('recommends same-major trusted version when cross-major exists', () => {
-    const result = detectPublishSecurityDowngradeForVersion(
+    const result = detectSecurityDowngradeForVersion(
       [
         {
           version: '1.0.0',

From 33766bc68d25cf981b4eab853ffcd310acab7a24 Mon Sep 17 00:00:00 2001
From: Tobbe Lundberg <tobbe@tlundberg.com>
Date: Sun, 11 Oct 2026 19:19:56 +0000
Subject: [PATCH 12/26] chore: use simple-icons for the tangled icon (#3321)

---
 app/components/OgImage/Package.takumi.vue | 2 +-
 app/composables/useProviderIcon.ts        | 2 +-
 assets/media/custom-icons.json            | 5 -----
 docs/content/2.guide/1.features.md        | 2 +-
 4 files changed, 3 insertions(+), 8 deletions(-)

diff --git a/app/components/OgImage/Package.takumi.vue b/app/components/OgImage/Package.takumi.vue
index bdb9a463ac..5ac1301b51 100644
--- a/app/components/OgImage/Package.takumi.vue
+++ b/app/components/OgImage/Package.takumi.vue
@@ -318,7 +318,7 @@ const sparklineSrc = computed(() => {
           />
           <div
             v-else-if="repoRef?.provider === 'tangled'"
-            class="i-custom:tangled shrink-0 text-fg-muted"
+            class="i-simple-icons:tangled shrink-0 text-fg-muted"
             style="width: 24px; height: 24px"
           />
           <div
diff --git a/app/composables/useProviderIcon.ts b/app/composables/useProviderIcon.ts
index d6539e95b4..9ad9f65d58 100644
--- a/app/composables/useProviderIcon.ts
+++ b/app/composables/useProviderIcon.ts
@@ -11,7 +11,7 @@ const PROVIDER_ICONS: Record<ProviderId, IconClass> = {
   forgejo: 'i-simple-icons:forgejo',
   gitee: 'i-simple-icons:gitee',
   sourcehut: 'i-simple-icons:sourcehut',
-  tangled: 'i-custom:tangled',
+  tangled: 'i-simple-icons:tangled',
   radicle: 'i-lucide:network', // Radicle is a P2P network, using network icon
   pushin: 'i-custom:pushin',
 }
diff --git a/assets/media/custom-icons.json b/assets/media/custom-icons.json
index 8f63128fe0..a66e139b95 100644
--- a/assets/media/custom-icons.json
+++ b/assets/media/custom-icons.json
@@ -4,11 +4,6 @@
     "width": 32,
     "height": 32
   },
-  "tangled": {
-    "body": "<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 25 25'><path fill='currentColor' d='M16.346 24.11c-.785-.007-1.384-.235-2.034-.632-.932-.49-1.643-1.314-2.152-2.222-.808 1.003-1.888 1.611-3.097 1.955-.515.15-1.416.301-2.911-.24-2.154-.724-3.723-2.965-3.545-5.25-.033-.946.313-1.875.802-2.674-1.305-.7-2.37-1.876-2.777-3.318-.248-.79-.237-1.64-.146-2.452.327-1.916 1.764-3.582 3.615-4.182.738-1.683 2.35-2.938 4.176-3.193a5.54 5.54 0 0 1 3.528.7C13.351.89 16.043.383 18.1 1.436c1.568.75 2.69 2.312 2.962 4.015 1.492.598 2.749 1.817 3.242 3.365.33.958.34 2.013.127 2.997-.382 1.536-1.465 2.842-2.868 3.557.003.273.901 2.243.751 3.73-.033 1.858-1.211 3.62-2.846 4.475-.954.557-2.085.546-3.12.535m-4.47-5.35c1.322-.148 2.19-1.3 2.862-2.339.319-.473.562-1.002.803-1.506.314.287.58.828 1.075.957.522.163 1.133.03 1.453-.443.611-1.14.31-2.517-.046-3.699-.22-.679-.507-1.375-1.054-1.856.116-.823-.372-1.66-1.065-2.09-.592.47-1.491.468-2.061-.037-1.093 1.115-2.095 1.078-3.063.195-.217-.199-.632 1.212-2.088.413-.837.7-1.485 1.375-2.06 2.346-.559 1.046-1.143 1.976-1.194 3.113-.024.664.495 1.36 1.198 1.306.703.063 1.182-.63 1.714-.917.08.928.169 1.924.482 2.829.36 1.171 1.627 1.916 2.825 1.745zm.687-3.498c-.644-.394-.334-1.25-.36-1.871.064-.75.115-1.538.453-2.221.356-.487 1.226-.3 1.265.326-.026.628-.314 1.254-.28 1.905-.075.544.054 1.155-.186 1.653-.198.275-.6.355-.892.208m-2.81-.358c-.605-.329-.413-1.156-.508-1.73.08-.666.014-1.51.571-1.978.545-.38 1.287.271 1.03.869-.276.755-.096 1.58-.09 2.346a.712.712 0 0 1-1.002.493'/></svg>",
-    "width": 25,
-    "height": 25
-  },
   "vlt": {
     "body": "<svg width='24' height='24' viewBox='0 0 24 24' fill='none' xmlns='http://www.w3.org/2000/svg'><path fill-rule='evenodd' clip-rule='evenodd' d='M7.9991 5.03666C7.9991 5.46387 7.93211 5.87545 7.80808 6.26145C7.45933 7.34674 7.1975 8.58253 7.7669 9.57009L10.389 14.1177C10.7072 14.6697 11.3617 14.9108 11.9989 14.9108V14.9108V14.9108C12.6352 14.9108 13.2886 14.6699 13.6064 14.1187L16.2301 9.5682C16.7993 8.58097 16.5379 7.34565 16.1895 6.26064C16.0656 5.87488 15.9987 5.46358 15.9987 5.03666C15.9987 2.82777 17.7894 1.03711 19.9983 1.03711C22.2071 1.03711 23.9978 2.82777 23.9978 5.03666C23.9978 7.24555 22.2071 9.03621 19.9983 9.03621V9.03621C19.3609 9.03621 18.7062 9.27733 18.3878 9.82951L15.7661 14.3766C15.1967 15.3642 15.4586 16.6001 15.8074 17.6854C15.9314 18.0715 15.9984 18.4831 15.9984 18.9104C15.9984 21.1193 14.2078 22.9099 11.9989 22.9099C9.79001 22.9099 7.99935 21.1193 7.99935 18.9104C7.99935 18.4834 8.06626 18.072 8.19016 17.6862C8.53863 16.6012 8.80017 15.3657 8.23092 14.3785L5.60752 9.8285C5.28961 9.27712 4.63601 9.03621 3.99955 9.03621V9.03621C1.79066 9.03621 0 7.24555 0 5.03666C0 2.82777 1.79066 1.03711 3.99955 1.03711C6.20844 1.03711 7.9991 2.82777 7.9991 5.03666Z' fill='currentColor'></path></svg>",
     "width": 24,
diff --git a/docs/content/2.guide/1.features.md b/docs/content/2.guide/1.features.md
index 77e19aae72..32fc9395bd 100644
--- a/docs/content/2.guide/1.features.md
+++ b/docs/content/2.guide/1.features.md
@@ -97,7 +97,7 @@ npmx.dev fetches repository statistics (stars, forks) from these git hosting pla
 | :icon{name="i-simple-icons-forgejo"} [Forgejo](https://forgejo.org)       | Community-driven Gitea fork           |
 | :icon{name="i-simple-icons-gitea"} [Gitea](https://gitea.com)             | Self-hosted git service               |
 | [Radicle](https://radicle.xyz)                                            | Peer-to-peer code collaboration       |
-| [Tangled](https://tangled.sh)                                             | Decentralized git hosting             |
+| :icon{name="i-simple-icons-tangled"} [Tangled](https://tangled.sh)        | Decentralized git hosting             |
 | [Pushin](https://pushin.eu)                                               | European git hosting                  |
 
 ## Explore users and organizations

From e77b78c64c31e56656ba75f83e7d8386d9778b4b Mon Sep 17 00:00:00 2001
From: Daniel Roe <daniel@roe.dev>
Date: Mon, 12 Oct 2026 13:58:19 +0100
Subject: [PATCH 13/26] ci: run release source check on synchronize

---
 .github/workflows/enforce-release-source.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/enforce-release-source.yml b/.github/workflows/enforce-release-source.yml
index 4e8c4f49a9..6d90c30374 100644
--- a/.github/workflows/enforce-release-source.yml
+++ b/.github/workflows/enforce-release-source.yml
@@ -7,6 +7,7 @@ on:
     types:
       - opened
       - reopened
+      - synchronize
       - edited
 
 concurrency:

From 60cc65bea6c921e91d976e60c53c2cd126c73fe2 Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@gmail.com>
Date: Wed, 14 Oct 2026 22:40:03 +0000
Subject: [PATCH 14/26] perf: cache normalised (trimmed) packument instead of
 raw (#3320)

---
 app/composables/npm/usePackage.ts             | 144 +-------
 app/composables/usePackageComparison.ts       |  60 ++-
 nuxt.config.ts                                |   8 +
 server/api/registry/packument/[...pkg].get.ts |  68 ++++
 {app => shared}/utils/install-scripts.ts      |   2 +
 shared/utils/packument.ts                     | 136 +++++++
 .../use-package-comparison.spec.ts            | 347 +++++++++++-------
 .../api/registry/packument/pkg.get.spec.ts    | 153 ++++++++
 .../utils/install-scripts.spec.ts             |   2 +-
 9 files changed, 618 insertions(+), 302 deletions(-)
 create mode 100644 server/api/registry/packument/[...pkg].get.ts
 rename {app => shared}/utils/install-scripts.ts (98%)
 create mode 100644 shared/utils/packument.ts
 create mode 100644 test/unit/server/api/registry/packument/pkg.get.spec.ts
 rename test/unit/{app => shared}/utils/install-scripts.spec.ts (99%)

diff --git a/app/composables/npm/usePackage.ts b/app/composables/npm/usePackage.ts
index 7f16200f87..2c4a0af93f 100644
--- a/app/composables/npm/usePackage.ts
+++ b/app/composables/npm/usePackage.ts
@@ -1,149 +1,23 @@
-import { getTrustStatus } from 'packumeta'
-import { normalizeLicense } from '#shared/utils/npm'
-import { detectSecurityDowngradeForVersion } from '~/utils/publish-security'
-
-/** Number of recent versions to include in initial payload */
-const RECENT_VERSIONS_COUNT = 5
-
-/**
- * Transform a full Packument into a slimmed version for client-side use.
- * Reduces payload size by:
- * - Removing readme (fetched separately)
- * - Including only: 5 most recent versions + one version per dist-tag + requested version
- * - Stripping unnecessary fields from version objects
- */
-export function transformPackument(
-  pkg: Packument,
-  requestedVersion?: string | null,
-): SlimPackument {
-  // Get versions pointed to by dist-tags
-  const distTagVersions = new Set(Object.values(pkg['dist-tags'] ?? {}))
-
-  // Get 5 most recent versions by publish time
-  const recentVersions = Object.keys(pkg.versions)
-    .filter(v => pkg.time[v])
-    .sort((a, b) => {
-      const timeA = pkg.time[a]
-      const timeB = pkg.time[b]
-      if (!timeA || !timeB) return 0
-      return Date.parse(timeB) - Date.parse(timeA)
-    })
-    .slice(0, RECENT_VERSIONS_COUNT)
-
-  // Combine: recent versions + dist-tag versions + requested version (deduplicated)
-  const includedVersions = new Set([...recentVersions, ...distTagVersions])
-
-  // Add the requested version if it exists in the package
-  if (requestedVersion && pkg.versions[requestedVersion]) {
-    includedVersions.add(requestedVersion)
-  }
-
-  // Computed from the full version history so only the small result is serialized.
-  const securityVersionEntries = Object.entries(pkg.versions).map(([version, metadata]) => ({
-    version,
-    time: pkg.time[version],
-    trustStatus: getTrustStatus(metadata),
-    deprecated: metadata.deprecated,
-  }))
-  const publishSecurityDowngrade = requestedVersion
-    ? detectSecurityDowngradeForVersion(securityVersionEntries, requestedVersion)
-    : null
-
-  // Build filtered versions object with install scripts info per version
-  const filteredVersions: Record<string, SlimVersion> = {}
-  let versionData: SlimPackumentVersion | null = null
-  for (const v of includedVersions) {
-    const version = pkg.versions[v]
-    if (version) {
-      const versionLicense = normalizeLicense(version.license)
-      if (version.version === requestedVersion) {
-        // Strip readme from each version, extract install scripts info
-        const { readme: _readme, scripts, ...slimVersion } = version
-
-        // Extract install scripts info (which scripts exist + npx deps)
-        const installScripts = scripts ? extractInstallScriptsInfo(scripts) : null
-        versionData = {
-          ...slimVersion,
-          license: versionLicense,
-          installScripts: installScripts ?? undefined,
-        }
-      }
-
-      filteredVersions[v] = {
-        trustStatus: getTrustStatus(version),
-        version: version.version,
-        deprecated: version.deprecated,
-        tags: version.tags as string[],
-        license: versionLicense,
-        type: typeof version.type === 'string' ? version.type : undefined,
-      }
-    }
-  }
-
-  // Build filtered time object (only for included versions + metadata)
-  const filteredTime: Record<string, string> = {}
-  if (pkg.time.modified) filteredTime.modified = pkg.time.modified
-  if (pkg.time.created) filteredTime.created = pkg.time.created
-  for (const v of includedVersions) {
-    if (pkg.time[v]) filteredTime[v] = pkg.time[v]
-  }
-
-  // Normalize license field
-  const license = normalizeLicense(requestedVersion ? versionData?.license : pkg.license)
-
-  // Extract storybook field from the requested version (custom package.json field)
-  const requestedPkgVersion = requestedVersion ? pkg.versions[requestedVersion] : null
-  const rawStorybook = requestedPkgVersion?.storybook
-  const storybook =
-    rawStorybook && typeof rawStorybook === 'object' && 'url' in rawStorybook
-      ? ({ url: rawStorybook.url } as { url: string })
-      : undefined
-
-  return {
-    // oxlint-disable-next-line eslint/no-underscore-dangle
-    '_id': pkg._id,
-    // oxlint-disable-next-line eslint/no-underscore-dangle
-    '_rev': pkg._rev,
-    'name': pkg.name,
-    'description': pkg.description,
-    'dist-tags': pkg['dist-tags'],
-    'time': filteredTime,
-    'maintainers': pkg.maintainers,
-    'author': pkg.author,
-    'license': license,
-    'homepage': pkg.homepage,
-    'keywords': pkg.keywords,
-    'repository': pkg.repository,
-    'bugs': pkg.bugs,
-    ...(storybook && { storybook }),
-    'requestedVersion': versionData,
-    'versions': filteredVersions,
-    'publishSecurityDowngrade': publishSecurityDowngrade,
-  }
-}
-
 export function usePackage(
   name: MaybeRefOrGetter<string>,
   requestedVersion?: MaybeRefOrGetter<string | null>,
 ) {
   const asyncData = useLazyAsyncData(
     () => `package:${toValue(name)}:${toValue(requestedVersion) ?? ''}`,
-    async ({ $npmRegistry }, { signal }) => {
+    async (_nuxtApp, { signal }) => {
       const encodedName = encodePackageName(toValue(name))
-      const { data: r, isStale } = await $npmRegistry<Packument>(`/${encodedName}`, {
+      const reqVer = toValue(requestedVersion)
+      // Fetch the already-trimmed packument from our own cached route so the
+      // full (often multi-MB) document is never sent to or parsed by the client.
+      const pkg = await $fetch<SlimPackument>(`/api/registry/packument/${encodedName}`, {
         signal,
+        params: reqVer ? { version: reqVer } : undefined,
       })
-      const reqVer = toValue(requestedVersion)
-      const pkg = transformPackument(r, reqVer)
-      return { ...pkg, isStale }
+      // Staleness is handled server-side by the route's SWR cache, so the
+      // response is always considered fresh from the client's perspective.
+      return { ...pkg, isStale: false }
     },
   )
 
-  if (import.meta.client && asyncData.data.value?.isStale) {
-    onMounted(() => {
-      asyncData.refresh()
-    })
-  }
-
   return asyncData
 }
diff --git a/app/composables/usePackageComparison.ts b/app/composables/usePackageComparison.ts
index 3e47b0028e..7d938d69e8 100644
--- a/app/composables/usePackageComparison.ts
+++ b/app/composables/usePackageComparison.ts
@@ -1,4 +1,3 @@
-import { normalizeLicense } from '#shared/utils/npm'
 import { parsePackageSpec } from '#shared/utils/parse-package-param'
 import { getDependencyCount } from '~/utils/npm/dependency-count'
 
@@ -62,20 +61,6 @@ export interface PackageComparisonData {
   isNoDependency?: boolean
 }
 
-/**
- * Resolve a requested version (exact version or dist-tag) against a packument.
- *
- * @returns The concrete version string, or `undefined` if it cannot be resolved.
- */
-function resolveRequestedVersion(pkgData: Packument, requested?: string): string | undefined {
-  if (!requested) return pkgData['dist-tags']?.latest
-  // Allow dist-tags such as "next" or "beta" in addition to exact versions.
-  const fromTag = pkgData['dist-tags']?.[requested]
-  if (fromTag) return fromTag
-  if (pkgData.versions?.[requested]) return requested
-  return undefined
-}
-
 /**
  * Composable for fetching and comparing multiple packages.
  *
@@ -84,7 +69,6 @@ function resolveRequestedVersion(pkgData: Packument, requested?: string): string
  */
 export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
   const { t } = useI18n()
-  const { $npmRegistry } = useNuxtApp()
   const numberFormatter = useNumberFormatter()
   const compactNumberFormatter = useCompactNumberFormatter()
   const bytesFormatter = useBytesFormatter()
@@ -138,13 +122,20 @@ export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
       const results = await Promise.all(
         namesToFetch.map(async (spec): Promise<PackageComparisonData | null> => {
           try {
-            // A spec may include a version (vue@3.6.0)
+            // A spec may include a version or dist-tag (vue@3.6.0, nuxt@next)
             const { name, version: requestedVersion } = parsePackageSpec(spec)
 
-            // Fetch basic package info first (required)
-            const { data: pkgData } = await $npmRegistry<Packument>(`/${encodePackageName(name)}`)
-            const resolvedVersion = resolveRequestedVersion(pkgData, requestedVersion)
-            if (!resolvedVersion) return null
+            // Fetch the already-trimmed packument from our own cached route. The
+            // route resolves the requested version (exact version or dist-tag,
+            // defaulting to latest) and returns that version's full manifest as
+            // `requestedVersion`.
+            const pkg = await $fetch<SlimPackument>(
+              `/api/registry/packument/${encodePackageName(name)}`,
+              { params: requestedVersion ? { version: requestedVersion } : undefined },
+            )
+            const versionData = pkg.requestedVersion
+            const resolvedVersion = versionData?.version
+            if (!versionData || !resolvedVersion) return null
 
             // Only target a specific version on the API endpoints when one was
             // explicitly requested
@@ -153,7 +144,7 @@ export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
               : ''
 
             // Fetch fast additional data in parallel (optional - failures are ok)
-            const repoInfo = parseRepositoryInfo(pkgData.repository)
+            const repoInfo = parseRepositoryInfo(pkg.repository)
             const isGitHub = repoInfo?.provider === 'github'
             const [downloads, analysis, vulns, likes, ghRepo, ghIssues] = await Promise.all([
               // Download counts are per-package, not per-version.
@@ -182,16 +173,15 @@ export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
                     .catch(() => null)
                 : Promise.resolve(null),
             ])
-            const versionData = pkgData.versions[resolvedVersion]
-            const packageSize = versionData?.dist?.unpackedSize
+            const packageSize = versionData.dist?.unpackedSize
 
             // Detect if package is binary-only
             const isBinary = isBinaryOnlyPackage({
-              name: pkgData.name,
-              bin: versionData?.bin,
-              main: versionData?.main,
-              module: versionData?.module,
-              exports: versionData?.exports,
+              name: pkg.name,
+              bin: versionData.bin,
+              main: versionData.main,
+              module: versionData.module,
+              exports: versionData.exports,
             })
 
             // Vulnerabilities
@@ -206,13 +196,13 @@ export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
 
             return {
               package: {
-                name: pkgData.name,
+                name: pkg.name,
                 version: resolvedVersion,
                 description: undefined,
               },
               downloads: downloads?.downloads,
               packageSize,
-              directDeps: versionData ? getDependencyCount(versionData) : null,
+              directDeps: getDependencyCount(versionData),
               installSize: undefined, // Will be filled in second pass
               analysis: analysis ?? undefined,
               vulnerabilities: {
@@ -220,13 +210,13 @@ export function usePackageComparison(packageNames: MaybeRefOrGetter<string[]>) {
                 severity: vulnsSeverity,
               },
               metadata: {
-                license: normalizeLicense(pkgData.license),
+                license: pkg.license,
                 // Use version-specific publish time, NOT time.modified (which can be
                 // updated by metadata changes like maintainer additions)
-                lastUpdated: pkgData.time?.[resolvedVersion],
-                createdAt: pkgData.time?.created,
+                lastUpdated: pkg.time?.[resolvedVersion],
+                createdAt: pkg.time?.created,
                 engines: analysis?.engines,
-                deprecated: versionData?.deprecated,
+                deprecated: versionData.deprecated,
                 github: {
                   stars: typeof ghRepo?.repo?.stars === 'number' ? ghRepo.repo.stars : undefined,
                   forks: typeof ghRepo?.repo?.forks === 'number' ? ghRepo.repo.forks : undefined,
diff --git a/nuxt.config.ts b/nuxt.config.ts
index cd352101a1..69107bd127 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -148,6 +148,14 @@ export default defineNuxtConfig({
     '/api/registry/provenance/**': { isr: true, cache: { maxAge: 365 * 24 * 60 * 60 } },
     '/api/registry/files/**': { isr: true, cache: { maxAge: 365 * 24 * 60 * 60 } },
     '/api/registry/package-meta/**': { isr: 300 },
+    '/api/registry/packument/**': {
+      isr: {
+        expiration: 300,
+        // The transform is version-aware, so the version must be part of the cache key
+        passQuery: true,
+        allowQuery: ['version'],
+      },
+    },
     '/:pkg/.well-known/skills/**': { isr: 3600 },
     '/:scope/:pkg/.well-known/skills/**': { isr: 3600 },
     '/_avatar/**': { isr: 3600, proxy: 'https://www.gravatar.com/avatar/**' },
diff --git a/server/api/registry/packument/[...pkg].get.ts b/server/api/registry/packument/[...pkg].get.ts
new file mode 100644
index 0000000000..b187373ba9
--- /dev/null
+++ b/server/api/registry/packument/[...pkg].get.ts
@@ -0,0 +1,68 @@
+import {
+  CACHE_MAX_AGE_FIVE_MINUTES,
+  ERROR_NPM_FETCH_FAILED,
+  NPM_REGISTRY,
+} from '#shared/utils/constants'
+import { encodePackageName } from '#shared/utils/npm'
+import { transformPackument } from '#shared/utils/packument'
+
+/**
+ * Returns an already-trimmed ("slim") packument for a package page render.
+ *
+ * Fetches the full packument from the npm registry, runs the same
+ * `transformPackument` the app uses, and returns only the small subset the
+ * page needs. This means:
+ * - The full packument is fetched and parsed at most once per cache period
+ *   and is never stored whole (only the trimmed result is cached).
+ * - Client-side navigation downloads a few KB instead of potentially tens of MB.
+ *
+ * The transform depends on the requested version, so the `version` query
+ * parameter is part of the cache key. The value may be an exact version or a
+ * dist-tag (e.g. `latest`, `next`); it is resolved against the packument before
+ * transforming. When omitted it defaults to the `latest` dist-tag, so callers
+ * that only need the current version get its full manifest in the response.
+ *
+ * URL patterns:
+ * - /api/registry/packument/packageName?version=1.2.3
+ * - /api/registry/packument/@scope/packageName?version=next
+ */
+export default defineCachedEventHandler(
+  async event => {
+    const pkgParam = getRouterParam(event, 'pkg')
+    if (!pkgParam) {
+      throw createError({ statusCode: 404, message: 'Package name is required' })
+    }
+
+    const packageName = decodeURIComponent(pkgParam)
+    const rawVersion = getQuery(event).version
+    const requestedVersion = typeof rawVersion === 'string' ? rawVersion : null
+
+    try {
+      const encodedName = encodePackageName(packageName)
+      const packument = await $fetch<Packument>(`${NPM_REGISTRY}/${encodedName}`)
+
+      // Resolve the requested version (an exact version or a dist-tag) to a
+      // concrete version so the transform includes that version's full
+      // manifest. Defaults to the `latest` dist-tag when none was requested.
+      const resolvedVersion = requestedVersion
+        ? (packument['dist-tags']?.[requestedVersion] ??
+          (packument.versions[requestedVersion] ? requestedVersion : null))
+        : (packument['dist-tags']?.latest ?? null)
+
+      return transformPackument(packument, resolvedVersion)
+    } catch (error: unknown) {
+      handleApiError(error, {
+        statusCode: 502,
+        message: ERROR_NPM_FETCH_FAILED,
+      })
+    }
+  },
+  {
+    maxAge: CACHE_MAX_AGE_FIVE_MINUTES,
+    swr: true,
+    getKey: event => {
+      const version = getQuery(event).version
+      return `packument:v1:${getRouterParam(event, 'pkg') ?? ''}:${typeof version === 'string' ? version : ''}`
+    },
+  },
+)
diff --git a/app/utils/install-scripts.ts b/shared/utils/install-scripts.ts
similarity index 98%
rename from app/utils/install-scripts.ts
rename to shared/utils/install-scripts.ts
index 9cbf28bd53..501111de67 100644
--- a/app/utils/install-scripts.ts
+++ b/shared/utils/install-scripts.ts
@@ -7,6 +7,8 @@
  * Also extracts npx package calls from those scripts.
  */
 
+import type { InstallScriptsInfo } from '#shared/types/npm-registry'
+
 // Scripts that run when installing a package as a dependency
 const INSTALL_SCRIPTS = new Set(['preinstall', 'install', 'postinstall'])
 
diff --git a/shared/utils/packument.ts b/shared/utils/packument.ts
new file mode 100644
index 0000000000..d1a9dcae40
--- /dev/null
+++ b/shared/utils/packument.ts
@@ -0,0 +1,136 @@
+import { getTrustStatus } from 'packumeta'
+import { extractInstallScriptsInfo } from '#shared/utils/install-scripts'
+import { normalizeLicense } from '#shared/utils/npm'
+import { detectSecurityDowngradeForVersion } from '~/utils/publish-security'
+import type {
+  Packument,
+  SlimPackument,
+  SlimPackumentVersion,
+  SlimVersion,
+} from '#shared/types/npm-registry'
+
+/** Number of recent versions to include in initial payload */
+const RECENT_VERSIONS_COUNT = 5
+
+/**
+ * Transform a full Packument into a slimmed version for client-side use.
+ * Reduces payload size by:
+ * - Removing readme (fetched separately)
+ * - Including only: 5 most recent versions + one version per dist-tag + requested version
+ * - Stripping unnecessary fields from version objects
+ *
+ * This runs server-side in the `/api/registry/packument` route, so the full
+ * packument never has to be sent to (or parsed by) the client.
+ *
+ * @param pkg Full packument as returned by the npm registry
+ * @param requestedVersion Version the caller wants full metadata for (optional)
+ */
+export function transformPackument(
+  pkg: Packument,
+  requestedVersion?: string | null,
+): SlimPackument {
+  // Get versions pointed to by dist-tags
+  const distTagVersions = new Set(Object.values(pkg['dist-tags'] ?? {}))
+
+  // Get 5 most recent versions by publish time
+  const recentVersions = Object.keys(pkg.versions)
+    .filter(v => pkg.time[v])
+    .sort((a, b) => {
+      const timeA = pkg.time[a]
+      const timeB = pkg.time[b]
+      if (!timeA || !timeB) return 0
+      return Date.parse(timeB) - Date.parse(timeA)
+    })
+    .slice(0, RECENT_VERSIONS_COUNT)
+
+  // Combine: recent versions + dist-tag versions + requested version (deduplicated)
+  const includedVersions = new Set([...recentVersions, ...distTagVersions])
+
+  // Add the requested version if it exists in the package
+  if (requestedVersion && pkg.versions[requestedVersion]) {
+    includedVersions.add(requestedVersion)
+  }
+
+  // Computed from the full version history so only the small result is serialized.
+  const securityVersionEntries = Object.entries(pkg.versions).map(([version, metadata]) => ({
+    version,
+    time: pkg.time[version],
+    trustStatus: getTrustStatus(metadata),
+    deprecated: metadata.deprecated,
+  }))
+  const publishSecurityDowngrade = requestedVersion
+    ? detectSecurityDowngradeForVersion(securityVersionEntries, requestedVersion)
+    : null
+
+  // Build filtered versions object with install scripts info per version
+  const filteredVersions: Record<string, SlimVersion> = {}
+  let versionData: SlimPackumentVersion | null = null
+  for (const v of includedVersions) {
+    const version = pkg.versions[v]
+    if (version) {
+      const versionLicense = normalizeLicense(version.license)
+      if (version.version === requestedVersion) {
+        // Strip readme from each version, extract install scripts info
+        const { readme: _readme, scripts, ...slimVersion } = version
+
+        // Extract install scripts info (which scripts exist + npx deps)
+        const installScripts = scripts ? extractInstallScriptsInfo(scripts) : null
+        versionData = {
+          ...slimVersion,
+          license: versionLicense,
+          installScripts: installScripts ?? undefined,
+        }
+      }
+
+      filteredVersions[v] = {
+        trustStatus: getTrustStatus(version),
+        version: version.version,
+        deprecated: version.deprecated,
+        tags: version.tags as string[],
+        license: versionLicense,
+        type: typeof version.type === 'string' ? version.type : undefined,
+      }
+    }
+  }
+
+  // Build filtered time object (only for included versions + metadata)
+  const filteredTime: Record<string, string> = {}
+  if (pkg.time.modified) filteredTime.modified = pkg.time.modified
+  if (pkg.time.created) filteredTime.created = pkg.time.created
+  for (const v of includedVersions) {
+    if (pkg.time[v]) filteredTime[v] = pkg.time[v]
+  }
+
+  // Normalize license field
+  const license = normalizeLicense(requestedVersion ? versionData?.license : pkg.license)
+
+  // Extract storybook field from the requested version (custom package.json field)
+  const requestedPkgVersion = requestedVersion ? pkg.versions[requestedVersion] : null
+  const rawStorybook = requestedPkgVersion?.storybook
+  const storybook =
+    rawStorybook && typeof rawStorybook === 'object' && 'url' in rawStorybook
+      ? ({ url: rawStorybook.url } as { url: string })
+      : undefined
+
+  return {
+    // oxlint-disable-next-line eslint/no-underscore-dangle
+    '_id': pkg._id,
+    // oxlint-disable-next-line eslint/no-underscore-dangle
+    '_rev': pkg._rev,
+    'name': pkg.name,
+    'description': pkg.description,
+    'dist-tags': pkg['dist-tags'],
+    'time': filteredTime,
+    'maintainers': pkg.maintainers,
+    'author': pkg.author,
+    'license': license,
+    'homepage': pkg.homepage,
+    'keywords': pkg.keywords,
+    'repository': pkg.repository,
+    'bugs': pkg.bugs,
+    ...(storybook && { storybook }),
+    'requestedVersion': versionData,
+    'versions': filteredVersions,
+    'publishSecurityDowngrade': publishSecurityDowngrade,
+  }
+}
diff --git a/test/nuxt/composables/use-package-comparison.spec.ts b/test/nuxt/composables/use-package-comparison.spec.ts
index 8067881869..56d81fbdec 100644
--- a/test/nuxt/composables/use-package-comparison.spec.ts
+++ b/test/nuxt/composables/use-package-comparison.spec.ts
@@ -2,6 +2,43 @@ import { afterEach, describe, expect, it, vi } from 'vitest'
 import { mountSuspended } from '@nuxt/test-utils/runtime'
 import type { PackageComparisonData } from '~/composables/usePackageComparison'
 
+interface FetchOptions {
+  baseURL?: string
+  params?: Record<string, unknown>
+}
+
+interface PackumentFixture {
+  'name'?: string
+  'dist-tags'?: Record<string, string>
+  'time'?: Record<string, string>
+  'license'?: string
+  'repository'?: { type?: string; url?: string } | string
+  'versions'?: Record<string, Record<string, unknown>>
+}
+
+/**
+ * Emulates the `/api/registry/packument` route for these tests: given the full
+ * packument a test wants the registry to hold, produce the trimmed response the
+ * compare composable consumes — the resolved version's full manifest as
+ * `requestedVersion`, plus the package-level metadata.
+ */
+function trimmedPackument(pkg: PackumentFixture, version?: unknown) {
+  const distTags = pkg['dist-tags'] ?? {}
+  const requested = typeof version === 'string' ? version : null
+  const resolved = requested
+    ? (distTags[requested] ?? (pkg.versions?.[requested] ? requested : null))
+    : (distTags.latest ?? null)
+  const versionData = resolved ? (pkg.versions?.[resolved] ?? null) : null
+  return {
+    'name': pkg.name,
+    'dist-tags': distTags,
+    'time': pkg['time'] ?? {},
+    'license': pkg.license,
+    'repository': pkg.repository,
+    'requestedVersion': versionData ? { ...versionData, version: resolved } : null,
+  }
+}
+
 /**
  * Helper to test usePackageComparison by wrapping it in a component.
  * This is required because the composable uses useI18n which must be
@@ -64,10 +101,10 @@ describe('usePackageComparison', () => {
       }
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve(registryData)
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(trimmedPackument(registryData, options?.params?.version))
           }
           return Promise.resolve(null)
         }),
@@ -95,21 +132,26 @@ describe('usePackageComparison', () => {
     it('stores version-specific time in metadata', async () => {
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'test-package',
-              'dist-tags': { latest: '1.0.0' },
-              'time': {
-                'modified': '2025-01-01T00:00:00.000Z',
-                '1.0.0': '2023-03-20T00:00:00.000Z',
-              },
-              'license': 'MIT',
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 10000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'test-package',
+                  'dist-tags': { latest: '1.0.0' },
+                  'time': {
+                    'modified': '2025-01-01T00:00:00.000Z',
+                    '1.0.0': '2023-03-20T00:00:00.000Z',
+                  },
+                  'license': 'MIT',
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 10000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
@@ -131,20 +173,25 @@ describe('usePackageComparison', () => {
     it('marks packages not published in 2+ years as stale', async () => {
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'old-package',
-              'dist-tags': { latest: '1.0.0' },
-              'time': {
-                '1.0.0': '2020-01-01T00:00:00.000Z', // More than 2 years ago
-              },
-              'license': 'MIT',
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 5000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'old-package',
+                  'dist-tags': { latest: '1.0.0' },
+                  'time': {
+                    '1.0.0': '2020-01-01T00:00:00.000Z', // More than 2 years ago
+                  },
+                  'license': 'MIT',
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 5000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
@@ -163,20 +210,25 @@ describe('usePackageComparison', () => {
     it('marks recently published packages as neutral', async () => {
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'fresh-package',
-              'dist-tags': { latest: '1.0.0' },
-              'time': {
-                '1.0.0': new Date().toISOString(), // Today
-              },
-              'license': 'MIT',
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 5000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'fresh-package',
+                  'dist-tags': { latest: '1.0.0' },
+                  'time': {
+                    '1.0.0': new Date().toISOString(), // Today
+                  },
+                  'license': 'MIT',
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 5000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
@@ -198,17 +250,22 @@ describe('usePackageComparison', () => {
       const pkgName = 'github-pkg'
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': pkgName,
-              'dist-tags': { latest: '1.0.0' },
-              'repository': { type: 'git', url: 'https://github.com/owner/repo' },
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 1000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': pkgName,
+                  'dist-tags': { latest: '1.0.0' },
+                  'repository': { type: 'git', url: 'https://github.com/owner/repo' },
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 1000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           if (fullUrl.includes('ungh.cc/repos/owner/repo')) {
             return Promise.resolve({ repo: { stars: 1500, forks: 100 } })
@@ -238,17 +295,22 @@ describe('usePackageComparison', () => {
       const pkgName = 'missing-metrics-pkg'
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': pkgName,
-              'dist-tags': { latest: '1.0.0' },
-              'repository': { type: 'git', url: 'https://github.com/owner/repo' },
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 1000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': pkgName,
+                  'dist-tags': { latest: '1.0.0' },
+                  'repository': { type: 'git', url: 'https://github.com/owner/repo' },
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 1000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           if (fullUrl.includes('ungh.cc/repos/owner/repo')) {
             // Return malformed data (stars missing)
@@ -274,22 +336,25 @@ describe('usePackageComparison', () => {
 
     it('skips github fetches for non-github repositories', async () => {
       const pkgName = 'gitlab-pkg'
-      const fetchMock = vi
-        .fn()
-        .mockImplementation((url: string, options?: { baseURL?: string }) => {
-          const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': pkgName,
-              'dist-tags': { latest: '1.0.0' },
-              'repository': { type: 'git', url: 'https://gitlab.com/owner/repo' },
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 1000 } },
+      const fetchMock = vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
+        const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
+        if (fullUrl.startsWith('/api/registry/packument/')) {
+          return Promise.resolve(
+            trimmedPackument(
+              {
+                'name': pkgName,
+                'dist-tags': { latest: '1.0.0' },
+                'repository': { type: 'git', url: 'https://gitlab.com/owner/repo' },
+                'versions': {
+                  '1.0.0': { dist: { unpackedSize: 1000 } },
+                },
               },
-            })
-          }
-          return Promise.resolve(null)
-        })
+              options?.params?.version,
+            ),
+          )
+        }
+        return Promise.resolve(null)
+      })
       vi.stubGlobal('$fetch', fetchMock)
 
       const { status, getFacetValues } = await usePackageComparisonInComponent([pkgName])
@@ -311,24 +376,29 @@ describe('usePackageComparison', () => {
       const requestedUrls: string[] = []
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
           requestedUrls.push(fullUrl)
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'test-package',
-              'dist-tags': { latest: '2.0.0' },
-              'time': {
-                'modified': '2025-01-01T00:00:00.000Z',
-                '1.0.0': '2022-03-20T00:00:00.000Z',
-                '2.0.0': '2025-01-01T00:00:00.000Z',
-              },
-              'license': 'MIT',
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 10000 } },
-                '2.0.0': { dist: { unpackedSize: 20000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'test-package',
+                  'dist-tags': { latest: '2.0.0' },
+                  'time': {
+                    'modified': '2025-01-01T00:00:00.000Z',
+                    '1.0.0': '2022-03-20T00:00:00.000Z',
+                    '2.0.0': '2025-01-01T00:00:00.000Z',
+                  },
+                  'license': 'MIT',
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 10000 } },
+                    '2.0.0': { dist: { unpackedSize: 20000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           if (fullUrl.includes('/api/registry/install-size/')) {
             return Promise.resolve({ selfSize: 1, totalSize: 2, dependencyCount: 3 })
@@ -369,22 +439,27 @@ describe('usePackageComparison', () => {
     it('resolves a dist-tag spec to its concrete version', async () => {
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'test-package',
-              'dist-tags': { latest: '1.0.0', next: '2.0.0-beta.1' },
-              'time': {
-                '1.0.0': '2024-01-01T00:00:00.000Z',
-                '2.0.0-beta.1': '2025-01-01T00:00:00.000Z',
-              },
-              'license': 'MIT',
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 10000 } },
-                '2.0.0-beta.1': { dist: { unpackedSize: 20000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'test-package',
+                  'dist-tags': { latest: '1.0.0', next: '2.0.0-beta.1' },
+                  'time': {
+                    '1.0.0': '2024-01-01T00:00:00.000Z',
+                    '2.0.0-beta.1': '2025-01-01T00:00:00.000Z',
+                  },
+                  'license': 'MIT',
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 10000 } },
+                    '2.0.0-beta.1': { dist: { unpackedSize: 20000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
@@ -402,16 +477,21 @@ describe('usePackageComparison', () => {
     it('returns null when the pinned version cannot be resolved', async () => {
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'test-package',
-              'dist-tags': { latest: '1.0.0' },
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 10000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'test-package',
+                  'dist-tags': { latest: '1.0.0' },
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 10000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
@@ -432,20 +512,25 @@ describe('usePackageComparison', () => {
       const createdDate = '2020-01-01T00:00:00.000Z'
       vi.stubGlobal(
         '$fetch',
-        vi.fn().mockImplementation((url: string, options?: { baseURL?: string }) => {
+        vi.fn().mockImplementation((url: string, options?: FetchOptions) => {
           const fullUrl = options?.baseURL ? `${options.baseURL}${url}` : url
-          if (fullUrl.startsWith('https://registry.npmjs.org/')) {
-            return Promise.resolve({
-              'name': 'test-package',
-              'dist-tags': { latest: '1.0.0' },
-              'time': {
-                'created': createdDate,
-                '1.0.0': createdDate,
-              },
-              'versions': {
-                '1.0.0': { dist: { unpackedSize: 1000 } },
-              },
-            })
+          if (fullUrl.startsWith('/api/registry/packument/')) {
+            return Promise.resolve(
+              trimmedPackument(
+                {
+                  'name': 'test-package',
+                  'dist-tags': { latest: '1.0.0' },
+                  'time': {
+                    'created': createdDate,
+                    '1.0.0': createdDate,
+                  },
+                  'versions': {
+                    '1.0.0': { dist: { unpackedSize: 1000 } },
+                  },
+                },
+                options?.params?.version,
+              ),
+            )
           }
           return Promise.resolve(null)
         }),
diff --git a/test/unit/server/api/registry/packument/pkg.get.spec.ts b/test/unit/server/api/registry/packument/pkg.get.spec.ts
new file mode 100644
index 0000000000..e0fcb7b94b
--- /dev/null
+++ b/test/unit/server/api/registry/packument/pkg.get.spec.ts
@@ -0,0 +1,153 @@
+import { afterAll, beforeEach, describe, expect, it, vi } from 'vitest'
+import { createError, type H3Event } from 'h3'
+import { NPM_REGISTRY } from '#shared/utils/constants'
+import { encodePackageName } from '#shared/utils/npm'
+import type { Packument, PackumentVersion } from '#shared/types/npm-registry'
+
+const npmFetchMock = vi.fn()
+vi.stubGlobal('$fetch', npmFetchMock)
+vi.stubGlobal('defineCachedEventHandler', (fn: Function) => fn)
+vi.stubGlobal('CACHE_MAX_AGE_FIVE_MINUTES', 300)
+
+const handleApiErrorMock = vi.fn(
+  (_error: unknown, fallback: { statusCode: number; message: string }) => {
+    throw createError(fallback)
+  },
+) as unknown as typeof handleApiError
+vi.stubGlobal('handleApiError', handleApiErrorMock)
+
+let routerParam: string | undefined
+let queryParams: Record<string, string | number> = {}
+
+vi.stubGlobal('getRouterParam', () => routerParam)
+vi.stubGlobal('getQuery', () => queryParams)
+vi.stubGlobal('createError', createError)
+
+const handler = (await import('#server/api/registry/packument/[...pkg].get')).default
+
+function makePackument(opts: {
+  versions: Record<string, Partial<PackumentVersion>>
+  time: Record<string, string>
+  distTags?: Record<string, string>
+  license?: string
+}): Packument {
+  return {
+    'name': 'my-pkg',
+    'dist-tags': opts.distTags ?? {},
+    'versions': Object.fromEntries(
+      Object.entries(opts.versions).map(([v, data]) => [v, { version: v, ...data }]),
+    ),
+    'time': opts.time,
+    'license': opts.license,
+  } as unknown as Packument
+}
+
+const fakeEvent = {} as H3Event
+
+afterAll(() => {
+  vi.unstubAllGlobals()
+})
+
+describe('packument API', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    routerParam = undefined
+    queryParams = {}
+  })
+
+  it('throws 404 when the package name param is missing', async () => {
+    routerParam = undefined
+    await expect(handler(fakeEvent)).rejects.toMatchObject({ statusCode: 404 })
+  })
+
+  it('defaults to the latest dist-tag when no version is requested', async () => {
+    routerParam = 'my-pkg'
+    npmFetchMock.mockResolvedValue(
+      makePackument({
+        versions: { '1.0.0': {}, '2.0.0': {} },
+        time: { '1.0.0': '2024-01-01T00:00:00Z', '2.0.0': '2025-01-01T00:00:00Z' },
+        distTags: { latest: '2.0.0' },
+      }),
+    )
+
+    const result = await handler(fakeEvent)
+    expect(result.requestedVersion?.version).toBe('2.0.0')
+    expect(result['dist-tags'].latest).toBe('2.0.0')
+  })
+
+  it('resolves an exact version', async () => {
+    routerParam = 'my-pkg'
+    queryParams = { version: '1.0.0' }
+    npmFetchMock.mockResolvedValue(
+      makePackument({
+        versions: { '1.0.0': {}, '2.0.0': {} },
+        time: { '1.0.0': '2024-01-01T00:00:00Z', '2.0.0': '2025-01-01T00:00:00Z' },
+        distTags: { latest: '2.0.0' },
+      }),
+    )
+
+    const result = await handler(fakeEvent)
+    expect(result.requestedVersion?.version).toBe('1.0.0')
+  })
+
+  it('resolves a dist-tag to its concrete version', async () => {
+    routerParam = 'my-pkg'
+    queryParams = { version: 'next' }
+    npmFetchMock.mockResolvedValue(
+      makePackument({
+        versions: { '1.0.0': {}, '2.0.0-beta.1': {} },
+        time: {
+          '1.0.0': '2024-01-01T00:00:00Z',
+          '2.0.0-beta.1': '2025-01-01T00:00:00Z',
+        },
+        distTags: { latest: '1.0.0', next: '2.0.0-beta.1' },
+      }),
+    )
+
+    const result = await handler(fakeEvent)
+    expect(result.requestedVersion?.version).toBe('2.0.0-beta.1')
+  })
+
+  it('includes no requestedVersion for an unresolvable version', async () => {
+    routerParam = 'my-pkg'
+    queryParams = { version: '9.9.9' }
+    npmFetchMock.mockResolvedValue(
+      makePackument({
+        versions: { '1.0.0': {} },
+        time: { '1.0.0': '2024-01-01T00:00:00Z' },
+        distTags: { latest: '1.0.0' },
+      }),
+    )
+
+    const result = await handler(fakeEvent)
+    expect(result.requestedVersion).toBeNull()
+  })
+
+  it('fetches the encoded package name from the npm registry', async () => {
+    routerParam = '%40scope%2Fmy-pkg'
+    npmFetchMock.mockResolvedValue(
+      makePackument({
+        versions: { '1.0.0': {} },
+        time: { '1.0.0': '2024-01-01T00:00:00Z' },
+        distTags: { latest: '1.0.0' },
+      }),
+    )
+
+    await handler(fakeEvent)
+    expect(npmFetchMock).toHaveBeenCalledWith(
+      `${NPM_REGISTRY}/${encodePackageName('@scope/my-pkg')}`,
+    )
+  })
+
+  it('calls handleApiError when the registry fetch fails', async () => {
+    routerParam = 'my-pkg'
+    const error = new Error('upstream failure')
+    npmFetchMock.mockRejectedValue(error)
+
+    await expect(handler(fakeEvent)).rejects.toMatchObject({ statusCode: 502 })
+    expect(handleApiErrorMock).toHaveBeenCalledWith(error, {
+      statusCode: 502,
+      message: expect.any(String),
+    })
+  })
+})
diff --git a/test/unit/app/utils/install-scripts.spec.ts b/test/unit/shared/utils/install-scripts.spec.ts
similarity index 99%
rename from test/unit/app/utils/install-scripts.spec.ts
rename to test/unit/shared/utils/install-scripts.spec.ts
index 187be050b5..ca79cd4ad7 100644
--- a/test/unit/app/utils/install-scripts.spec.ts
+++ b/test/unit/shared/utils/install-scripts.spec.ts
@@ -3,7 +3,7 @@ import {
   extractInstallScriptsInfo,
   getInstallScriptFilePath,
   parseNodeScript,
-} from '~/utils/install-scripts'
+} from '#shared/utils/install-scripts'
 
 describe('extractInstallScriptsInfo', () => {
   it('returns null when no install scripts exist', () => {

From 9e52cbdfebe854a72af4f1c60375b2b3d5571403 Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@gmail.com>
Date: Wed, 14 Oct 2026 23:31:51 +0000
Subject: [PATCH 15/26] perf: avoid redundant packument fetch for
 license-change check (#3322)

---
 server/api/registry/packument/[...pkg].get.ts | 21 +++++----------
 .../api/registry/packument/pkg.get.spec.ts    | 26 ++++++++-----------
 2 files changed, 18 insertions(+), 29 deletions(-)

diff --git a/server/api/registry/packument/[...pkg].get.ts b/server/api/registry/packument/[...pkg].get.ts
index b187373ba9..8d1158953c 100644
--- a/server/api/registry/packument/[...pkg].get.ts
+++ b/server/api/registry/packument/[...pkg].get.ts
@@ -1,20 +1,14 @@
-import {
-  CACHE_MAX_AGE_FIVE_MINUTES,
-  ERROR_NPM_FETCH_FAILED,
-  NPM_REGISTRY,
-} from '#shared/utils/constants'
-import { encodePackageName } from '#shared/utils/npm'
 import { transformPackument } from '#shared/utils/packument'
+import { CACHE_MAX_AGE_FIVE_MINUTES, ERROR_NPM_FETCH_FAILED } from '#shared/utils/constants'
 
 /**
  * Returns an already-trimmed ("slim") packument for a package page render.
  *
- * Fetches the full packument from the npm registry, runs the same
- * `transformPackument` the app uses, and returns only the small subset the
- * page needs. This means:
- * - The full packument is fetched and parsed at most once per cache period
- *   and is never stored whole (only the trimmed result is cached).
- * - Client-side navigation downloads a few KB instead of potentially tens of MB.
+ * Fetches the full packument via `fetchNpmPackage` so a server-rendered package
+ * page shares a single (Nitro-cached) download of the potentially huge document
+ * with the other server routes that need it (license-change, readme, ...). Only
+ * the small trimmed subset is returned and cached here, so clients download a
+ * few KB instead of potentially tens of MB.
  *
  * The transform depends on the requested version, so the `version` query
  * parameter is part of the cache key. The value may be an exact version or a
@@ -38,8 +32,7 @@ export default defineCachedEventHandler(
     const requestedVersion = typeof rawVersion === 'string' ? rawVersion : null
 
     try {
-      const encodedName = encodePackageName(packageName)
-      const packument = await $fetch<Packument>(`${NPM_REGISTRY}/${encodedName}`)
+      const packument = await fetchNpmPackage(packageName)
 
       // Resolve the requested version (an exact version or a dist-tag) to a
       // concrete version so the transform includes that version's full
diff --git a/test/unit/server/api/registry/packument/pkg.get.spec.ts b/test/unit/server/api/registry/packument/pkg.get.spec.ts
index e0fcb7b94b..15be07692b 100644
--- a/test/unit/server/api/registry/packument/pkg.get.spec.ts
+++ b/test/unit/server/api/registry/packument/pkg.get.spec.ts
@@ -1,11 +1,9 @@
 import { afterAll, beforeEach, describe, expect, it, vi } from 'vitest'
 import { createError, type H3Event } from 'h3'
-import { NPM_REGISTRY } from '#shared/utils/constants'
-import { encodePackageName } from '#shared/utils/npm'
 import type { Packument, PackumentVersion } from '#shared/types/npm-registry'
 
-const npmFetchMock = vi.fn()
-vi.stubGlobal('$fetch', npmFetchMock)
+const fetchNpmPackageMock = vi.fn()
+vi.stubGlobal('fetchNpmPackage', fetchNpmPackageMock)
 vi.stubGlobal('defineCachedEventHandler', (fn: Function) => fn)
 vi.stubGlobal('CACHE_MAX_AGE_FIVE_MINUTES', 300)
 
@@ -62,7 +60,7 @@ describe('packument API', () => {
 
   it('defaults to the latest dist-tag when no version is requested', async () => {
     routerParam = 'my-pkg'
-    npmFetchMock.mockResolvedValue(
+    fetchNpmPackageMock.mockResolvedValue(
       makePackument({
         versions: { '1.0.0': {}, '2.0.0': {} },
         time: { '1.0.0': '2024-01-01T00:00:00Z', '2.0.0': '2025-01-01T00:00:00Z' },
@@ -78,7 +76,7 @@ describe('packument API', () => {
   it('resolves an exact version', async () => {
     routerParam = 'my-pkg'
     queryParams = { version: '1.0.0' }
-    npmFetchMock.mockResolvedValue(
+    fetchNpmPackageMock.mockResolvedValue(
       makePackument({
         versions: { '1.0.0': {}, '2.0.0': {} },
         time: { '1.0.0': '2024-01-01T00:00:00Z', '2.0.0': '2025-01-01T00:00:00Z' },
@@ -93,7 +91,7 @@ describe('packument API', () => {
   it('resolves a dist-tag to its concrete version', async () => {
     routerParam = 'my-pkg'
     queryParams = { version: 'next' }
-    npmFetchMock.mockResolvedValue(
+    fetchNpmPackageMock.mockResolvedValue(
       makePackument({
         versions: { '1.0.0': {}, '2.0.0-beta.1': {} },
         time: {
@@ -111,7 +109,7 @@ describe('packument API', () => {
   it('includes no requestedVersion for an unresolvable version', async () => {
     routerParam = 'my-pkg'
     queryParams = { version: '9.9.9' }
-    npmFetchMock.mockResolvedValue(
+    fetchNpmPackageMock.mockResolvedValue(
       makePackument({
         versions: { '1.0.0': {} },
         time: { '1.0.0': '2024-01-01T00:00:00Z' },
@@ -123,9 +121,9 @@ describe('packument API', () => {
     expect(result.requestedVersion).toBeNull()
   })
 
-  it('fetches the encoded package name from the npm registry', async () => {
+  it('fetches the decoded package name via fetchNpmPackage', async () => {
     routerParam = '%40scope%2Fmy-pkg'
-    npmFetchMock.mockResolvedValue(
+    fetchNpmPackageMock.mockResolvedValue(
       makePackument({
         versions: { '1.0.0': {} },
         time: { '1.0.0': '2024-01-01T00:00:00Z' },
@@ -134,15 +132,13 @@ describe('packument API', () => {
     )
 
     await handler(fakeEvent)
-    expect(npmFetchMock).toHaveBeenCalledWith(
-      `${NPM_REGISTRY}/${encodePackageName('@scope/my-pkg')}`,
-    )
+    expect(fetchNpmPackageMock).toHaveBeenCalledWith('@scope/my-pkg')
   })
 
-  it('calls handleApiError when the registry fetch fails', async () => {
+  it('calls handleApiError when the packument fetch fails', async () => {
     routerParam = 'my-pkg'
     const error = new Error('upstream failure')
-    npmFetchMock.mockRejectedValue(error)
+    fetchNpmPackageMock.mockRejectedValue(error)
 
     await expect(handler(fakeEvent)).rejects.toMatchObject({ statusCode: 502 })
     expect(handleApiErrorMock).toHaveBeenCalledWith(error, {

From e1e9ce5ad5d30650cf48e05cea609500f186f87d Mon Sep 17 00:00:00 2001
From: Bugo <229402+dragomano@users.noreply.github.com>
Date: Sun, 18 Oct 2026 01:22:46 +0000
Subject: [PATCH 16/26] fix(i18n): update Russian translations (#3330)

---
 i18n/locales/ru-RU.json | 86 ++++++++++++++++++++++++++++++++++++++---
 1 file changed, 80 insertions(+), 6 deletions(-)

diff --git a/i18n/locales/ru-RU.json b/i18n/locales/ru-RU.json
index 95e9c6b953..102cae2afd 100644
--- a/i18n/locales/ru-RU.json
+++ b/i18n/locales/ru-RU.json
@@ -24,6 +24,7 @@
     "brand": "бренд",
     "resources": "Ресурсы",
     "features": "Функции",
+    "tools": "инструменты",
     "other": "Дополнительно",
     "sponsored_by": "При поддержке {list}"
   },
@@ -40,6 +41,7 @@
     "show_kbd_hints": "Подсветить подсказки клавиш",
     "settings": "Открыть настройки",
     "compare": "Открыть сравнение",
+    "deps_stats": "Открыть инструмент статистики зависимостей",
     "compare_from_package": "Открыть сравнение (с текущим пакетом)",
     "changelog": "Открыть список изменений",
     "navigate_results": "Навигация по результатам",
@@ -204,6 +206,7 @@
     "popular_packages": "Популярные пакеты",
     "settings": "настройки",
     "compare": "сравнить",
+    "tools": "инструменты",
     "back": "назад",
     "menu": "Меню",
     "mobile_menu": "Навигационное меню",
@@ -211,6 +214,46 @@
     "links": "Ссылки",
     "tap_to_search": "Нажмите для поиска"
   },
+  "tools": {
+    "title": "Инструменты",
+    "tagline": "утилиты для исследования пакетов и зависимостей проекта",
+    "meta_title": "Инструменты — npmx",
+    "meta_description": "Инструменты npmx для исследования пакетов и зависимостей проекта",
+    "deps_stats": {
+      "name": "Статистика зависимостей",
+      "description": "Загрузите package.json и изучите статистику по каждой зависимости"
+    }
+  },
+  "deps_stats": {
+    "title": "Статистика зависимостей",
+    "meta_title": "Статистика зависимостей — npmx",
+    "meta_description": "Загрузите package.json и изучите статистику по каждой зависимости",
+    "upload": {
+      "section": "Package.json",
+      "label": "Загрузить package.json",
+      "hint": "Перетащите package.json сюда или выберите файл. Считываются только поля зависимостей — данные не отправляются на сервер",
+      "clear": "Очистить",
+      "invalid_package_json": "Некорректный package.json"
+    },
+    "dependencies": {
+      "title": "Зависимости",
+      "count": "Нет зависимостей | 1 зависимость | {count} зависимостей",
+      "filter_label": "Фильтр зависимостей",
+      "filter_placeholder": "Фильтровать зависимости...",
+      "empty": "В этом package.json нет зависимостей",
+      "no_matches": "Нет зависимостей, соответствующих фильтру",
+      "non_registry": "Не пакет из реестра npm"
+    },
+    "stats": {
+      "empty_title": "Выберите зависимость",
+      "empty_description": "Выберите пакет из списка, чтобы увидеть загрузки, размер, уязвимости, тренды и другие данные",
+      "non_registry_title": "Локальная или удалённая зависимость",
+      "non_registry_description": "Эта запись указывает на файл, workspace, git или URL-зависимость, поэтому статистика из реестра недоступна",
+      "declared_range": "Указано",
+      "resolved_version": "Последняя",
+      "open_full_stats": "Открыть полную статистику"
+    }
+  },
   "blog": {
     "title": "Блог",
     "heading": "Блог",
@@ -382,6 +425,7 @@
       "forgejo": "Открыть на Forgejo",
       "gitea": "Открыть на Gitea",
       "gitee": "Открыть на Gitee",
+      "pushin": "Открыть на Pushin",
       "radicle": "Открыть на Radicle",
       "socket_dev": "Открыть на socket.dev",
       "sourcehut": "Открыть на SourceHut",
@@ -390,7 +434,8 @@
     "collapse": "Свернуть",
     "collapse_with_name": "Свернуть {name}",
     "expand": "Развернуть",
-    "expand_with_name": "Развернуть {name}"
+    "expand_with_name": "Развернуть {name}",
+    "copyMdError": "Не удалось загрузить markdown, попробуйте позже"
   },
   "profile": {
     "display_name": "Отображаемое имя",
@@ -520,8 +565,12 @@
       "pm_label": "Пакетный менеджер",
       "copy_command": "Скопировать команду установки",
       "copy_dev_command": "Копировать команду dev-установки",
+      "copy_types_command": "Скопировать команду установки типов",
       "dev_dependency_hint": "Обычно устанавливается как dev-зависимость",
-      "view_types": "Посмотреть {package}"
+      "view_types": "Посмотреть {package}",
+      "types_label": "Типы",
+      "collapse_commands": "Свернуть дополнительные команды",
+      "expand_commands": "Показать дополнительные команды"
     },
     "create": {
       "title": "Создать новый проект",
@@ -530,7 +579,16 @@
     },
     "run": {
       "title": "Запуск",
-      "locally": "Запустить локально"
+      "locally": "Запустить локально",
+      "copy_command": "Скопировать команду для локального запуска"
+    },
+    "command": {
+      "copied_install": "Команда установки скопирована",
+      "copied_dev_install": "Команда dev-установки скопирована",
+      "copied_run": "Команда запуска скопирована",
+      "copied_create": "Команда создания скопирована",
+      "copied_execute": "Команда выполнения скопирована",
+      "copied_skills": "Команда skills скопирована"
     },
     "readme": {
       "title": "Readme",
@@ -606,6 +664,7 @@
       "grouping_usage_about": "О группировке по использованию",
       "grouping_usage_all": "Все",
       "grouping_usage_most_used": "Чаще всего",
+      "order_by_downloads": "Сортировать по загрузкам",
       "recent_versions_only_tooltip": "Показывать только версии, опубликованные за последний год.",
       "show_low_usage_tooltip": "Включить группы версий, на которые приходится менее 1% от общего числа загрузок.",
       "y_axis_label": "Загрузки",
@@ -629,6 +688,7 @@
     "timeline": {
       "load_more": "Загрузить ещё",
       "load_error": "Не удалось загрузить хронологию. Попробуйте позже.",
+      "no_stable_versions": "Нет стабильных версий для отображения. Отключите параметр «Только стабильные», чтобы включить предварительные версии.",
       "size_increase": "Размер установки увеличился на {percent}% ({size})",
       "size_decrease": "Размер установки уменьшился на {percent}% ({size})",
       "dep_increase": "Добавлена {count} зависимость | Добавлено {count} зависимости | Добавлено {count} зависимостей",
@@ -642,6 +702,7 @@
       "trusted_publisher_removed": "Доверенная публикация удалена",
       "provenance_added": "Происхождение включено",
       "provenance_removed": "Происхождение удалено",
+      "deprecated": "Устарело",
       "chart": {
         "tab_aria_label": "Выбор метрики",
         "dependency_size": "Размер зависимостей",
@@ -650,6 +711,9 @@
         "zoom": "масштабировать",
         "reset_minimap": "сбросить миникарту",
         "ordered_versions": "только стабильные",
+        "sort_label": "Сортировать по",
+        "sort_time": "Время публикации",
+        "sort_semver": "Semver",
         "copy_alt": {
           "key_changes": "Ключевые изменения: {version_events}.",
           "version_events": "версия {version}: {events}",
@@ -671,7 +735,8 @@
       "outdated_minor": "{count} минорная версия позади (последняя: {latest}) | {count} минорные версии позади (последняя: {latest}) | {count} минорных версий позади (последняя: {latest})",
       "outdated_patch": "Доступно патч-обновление (последняя: {latest})",
       "has_replacement": "Для этой зависимости есть рекомендуемые замены",
-      "vulnerabilities_count": "{count} уязвимость | {count} уязвимости | {count} уязвимостей"
+      "vulnerabilities_count": "{count} уязвимость | {count} уязвимости | {count} уязвимостей",
+      "aliased_to": "Псевдоним для {name}"
     },
     "peer_dependencies": {
       "title": "Peer-зависимости ({count})",
@@ -715,16 +780,19 @@
       "granularity_yearly": "По годам",
       "start_date": "Начало",
       "end_date": "Конец",
+      "last_recorded_value": "* Последнее записанное значение",
       "loading": "Загрузка...",
       "date_range": "С {start} по {end}",
       "date_range_multiline": "С {start}\nпо {end}",
       "download_file": "Скачать {fileType}",
+      "copy_file": "Скопировать {fileType}",
       "toggle_annotator": "Переключить аннотации",
       "toggle_stack_mode": "Переключить режим накопления",
       "open_options": "Открыть параметры",
       "close_options": "Закрыть параметры",
       "legend_estimation": "Оценка",
       "no_data": "Нет данных",
+      "no_data_short": "Нет данных",
       "y_axis_label": "{granularity} {facet}",
       "facet": "Параметр",
       "title": "Тренды",
@@ -768,6 +836,10 @@
         "copy_url": "Скопируйте этот URL для встраивания графика на ваш сайт",
         "preview": "Предпросмотр",
         "tip": "Если начальная и конечная даты не указаны, по умолчанию берутся последние 12 месяцев."
+      },
+      "sparkline_zoom_reset": {
+        "title": "Сбросить масштаб · дважды кликните на графике или нажмите Esc",
+        "aria_label": "Сбросить масштаб"
       }
     },
     "downloads": {
@@ -1802,7 +1874,8 @@
   "logo_menu": {
     "copy_svg": "Копировать логотип как SVG",
     "copied": "Скопировано!",
-    "browse_brand": "Набор бренда"
+    "browse_brand": "Набор бренда",
+    "open_new_tab": "Открыть npmx в новой вкладке"
   },
   "brand": {
     "title": "Бренд",
@@ -1861,6 +1934,7 @@
     "version_unavailable": "Запрошенная версия недоступна.",
     "ungh": {
       "rate_limit": "К сожалению, достигнут лимит запросов GitHub. Попробуйте снова через некоторое время."
-    }
+    },
+    "copy_as_markdown": "Скопировать список изменений как Markdown"
   }
 }

From 084c9439f13f1a4b99eb18259a1ab331bbe454b1 Mon Sep 17 00:00:00 2001
From: Max <6406412+maxdzin@users.noreply.github.com>
Date: Sun, 18 Oct 2026 01:24:05 +0000
Subject: [PATCH 17/26] fix(i18n): add missing translations and fix some
 existing for ua-UK locale (#3329)

---
 config/i18n.ts          |  10 +-
 i18n/locales/uk-UA.json | 271 ++++++++++++++++++++++++++++++++++++----
 2 files changed, 256 insertions(+), 25 deletions(-)

diff --git a/config/i18n.ts b/config/i18n.ts
index 9d0ded7d35..3561ea9210 100644
--- a/config/i18n.ts
+++ b/config/i18n.ts
@@ -107,6 +107,9 @@ function createPluralRule(locale: string, mapping: Record<string, number>) {
   }
 }
 
+const ukThreeFormRule = createPluralRule('uk-UA', { one: 0, few: 1, many: 2, other: 2 })
+const ukFourFormRule = createPluralRule('uk-UA', { one: 1, few: 2, many: 3, other: 3 })
+
 const locales: (LocaleObjectData | (Omit<LocaleObjectData, 'code'> & { code: string }))[] = [
   {
     code: 'en',
@@ -257,7 +260,12 @@ const locales: (LocaleObjectData | (Omit<LocaleObjectData, 'code'> & { code: str
     code: 'uk-UA',
     file: 'uk-UA.json',
     name: 'Українська',
-    pluralRule: createPluralRule('uk-UA', { zero: 2, one: 0, two: 1, few: 1, many: 2, other: 3 }),
+    pluralRule: (choice, choicesLength) => {
+      if (choice === 0 && choicesLength === 4) return 0
+
+      const rule = choicesLength === 4 ? ukFourFormRule : ukThreeFormRule
+      return rule(choice, choicesLength)
+    },
   },
   /*{
       code: 'ru-RU',
diff --git a/i18n/locales/uk-UA.json b/i18n/locales/uk-UA.json
index bfe36dbfbb..d25ab33873 100644
--- a/i18n/locales/uk-UA.json
+++ b/i18n/locales/uk-UA.json
@@ -13,6 +13,7 @@
   "trademark_disclaimer": "npm є зареєстрованою торговою маркою npm, Inc. Цей сайт не пов'язаний з npm, Inc.",
   "footer": {
     "about": "про проєкт",
+    "sponsors": "спонсори",
     "blog": "блог",
     "docs": "документація",
     "source": "код",
@@ -23,7 +24,9 @@
     "brand": "бренд",
     "resources": "Ресурси",
     "features": "Функції",
-    "other": "Інше"
+    "tools": "інструменти",
+    "other": "Інше",
+    "sponsored_by": "Спонсори: {list}"
   },
   "shortcuts": {
     "section": {
@@ -38,7 +41,9 @@
     "show_kbd_hints": "Підсвітити підказки клавіатури",
     "settings": "Відкрити налаштування",
     "compare": "Відкрити порівняння",
+    "deps_stats": "Відкрити інструмент статистики залежностей",
     "compare_from_package": "Відкрити порівняння (з поточним пакетом)",
+    "changelog": "Відкрити журнал змін",
     "navigate_results": "Навігація результатами",
     "go_to_result": "Перейти до результату",
     "open_code_view": "Відкрити перегляд коду",
@@ -46,7 +51,8 @@
     "disable_shortcuts": "Ви можете вимкнути гарячі клавіші в {settings}.",
     "open_main": "Відкрити основну інформацію",
     "open_diff": "Відкрити порівняння версій",
-    "open_timeline": "Відкрити хронологію"
+    "open_timeline": "Відкрити хронологію",
+    "open_stats": "Відкрити статистику"
   },
   "search": {
     "label": "Пошук пакетів npm",
@@ -98,6 +104,11 @@
     "current": "поточна",
     "here": "ви тут",
     "connected": "підключено",
+    "keyboard_shortcuts": {
+      "navigate": "перейти",
+      "select": "вибрати",
+      "close": "закрити"
+    },
     "state": {
       "on": "увімкнено",
       "off": "вимкнено"
@@ -153,7 +164,9 @@
       "code": "Код",
       "diff": "Різниця",
       "compare": "Порівняти цей пакет",
-      "download": "Завантажити tarball"
+      "download": "Завантажити tarball",
+      "changelog": "Журнал змін",
+      "stats": "Статистика"
     },
     "code": {
       "copy_file": "Копіювати вміст файлу"
@@ -177,6 +190,7 @@
       "theme_changed": "Тему змінено на {theme}.",
       "accent_color_changed": "Акцентний колір змінено на {color}.",
       "background_theme_changed": "Відтінок фону змінено на {theme}.",
+      "foreground_theme_changed": "Відтінок переднього плану змінено на {theme}.",
       "download_started": "Завантаження tarball пакета {package}.",
       "copied_to_clipboard": "Скопійовано до буфера обміну.",
       "npm_disconnected": "npm CLI відключено.",
@@ -192,6 +206,7 @@
     "popular_packages": "Популярні пакети",
     "settings": "налаштування",
     "compare": "порівняти",
+    "tools": "інструменти",
     "back": "назад",
     "menu": "Меню",
     "mobile_menu": "Меню навігації",
@@ -199,6 +214,46 @@
     "links": "Посилання",
     "tap_to_search": "Натисніть для пошуку"
   },
+  "tools": {
+    "title": "інструменти",
+    "tagline": "утиліти для дослідження пакетів та залежностей проєктів",
+    "meta_title": "Інструменти - npmx",
+    "meta_description": "Перегляньте інструменти npmx для дослідження пакетів та залежностей проєктів",
+    "deps_stats": {
+      "name": "статистика залежностей",
+      "description": "Завантажте файл package.json та перевірте статистику для кожної залежності"
+    }
+  },
+  "deps_stats": {
+    "title": "статистика залежностей",
+    "meta_title": "Статистика залежностей - npmx",
+    "meta_description": "Завантажте package.json та перегляньте статистику щодо кожної залежності",
+    "upload": {
+      "section": "Package.json",
+      "label": "Завантажте package.json",
+      "hint": "Перетягніть файл package.json сюди або виберіть файл. Зчитуються лише поля, що містять залежності — на сервер нічого не завантажується",
+      "clear": "Очистити",
+      "invalid_package_json": "Недійсний package.json"
+    },
+    "dependencies": {
+      "title": "Залежності",
+      "count": "Немає залежностей | {count} залежність | {count} залежності | {count} залежностей",
+      "filter_label": "Фільтрувати залежності",
+      "filter_placeholder": "Фільтрувати залежності...",
+      "empty": "У цьому пакеті.json не знайдено жодних залежностей",
+      "no_matches": "Жодна залежність не відповідає вашому фільтру",
+      "non_registry": "Не є пакетом реєстру npm"
+    },
+    "stats": {
+      "empty_title": "Виберіть залежність",
+      "empty_description": "Виберіть пакет зі списку, щоб переглянути завантаження, розмір, вразливості, тенденції та інше",
+      "non_registry_title": "Локальна або віддалена залежність",
+      "non_registry_description": "Цей запис вказує на залежність типу файл, робочий простір, git або URL-адреса, тому статистика реєстру недоступна",
+      "declared_range": "Визначена",
+      "resolved_version": "Остання",
+      "open_full_stats": "Відкрити повну статистику"
+    }
+  },
   "blog": {
     "title": "Блог",
     "heading": "блог",
@@ -225,6 +280,32 @@
       "more_replies": "ще {count} відповідь... | ще {count} відповіді... | ще {count} відповідей..."
     }
   },
+  "noodles": {
+    "title": "Нудлс",
+    "meta_description": "Кожен нудлс, який ми коли-небудь показували на npmx — сезонні логотипи, пасхальні яйця та історії, що стоять за ними.",
+    "latest": "Останній нудлс",
+    "what_is": "Що таке нудлс",
+    "what_is_body": "Нудлс — це різноманітні грайливі варіанти логотипу npmx, які ми розміщуємо на головній сторінці, щоб відзначити випуски, свята, події та інші моменти, які варто відсвяткувати. Уявіть собі щось на зразок Google Doodles, але для пакетів npm.",
+    "empty": "Поки що немає нудлс.",
+    "load_more": "Завантажити ще {count}",
+    "dates": "Активні дати",
+    "shipped_in": "Випущено в",
+    "credits": "Подяки",
+    "learn_more": "Дізнайтесь більше",
+    "carousel_prev": "Попереднє зображення",
+    "carousel_next": "Наступне зображення",
+    "carousel_dots": "Варіант навігації зображеннями",
+    "carousel_jump": "Перейти до зображення {index}",
+    "lens_label": "{title} — добірка зображень",
+    "lens_slide": "зображення {index}",
+    "lens_slide_position": "Слайд {index} із {total}",
+    "back_to_archive": "Назад до всіх нудлс",
+    "missing": {
+      "title": "Цей нудлс ніколи не вибирався з миски.",
+      "body": "У нашому меню немає нудлс “{slug}”. Або вона ще готується, або нам ще бракує рецепта. У будь-якому разі — повернемося до архіву.",
+      "empty_bowl": "порожня миска"
+    }
+  },
   "settings": {
     "title": "налаштування",
     "tagline": "налаштуйте ваше середовище npmx",
@@ -273,16 +354,24 @@
     "clear_accent": "Очистити акцентний колір",
     "translation_progress": "Статус перекладу",
     "background_themes": {
-      "label": "Відтінки фону",
+      "label": "Відтінок фону",
       "neutral": "Нейтральний",
       "stone": "Кам'яний",
       "zinc": "Цинковий",
       "slate": "Сланцевий",
       "black": "Чорний"
     },
+    "foreground_themes": {
+      "label": "Відтінок переднього плану",
+      "contrast": "Контраст",
+      "standard": "Стандартна",
+      "muted": "Приглушена"
+    },
     "keyboard_shortcuts_enabled": "Увімкнути гарячі клавіші",
     "keyboard_shortcuts_enabled_description": "Гарячі клавіші можна вимкнути, якщо вони конфліктують з налаштуваннями браузера або системи",
-    "enable_code_ligatures": "Увімкнути лігатури в коді"
+    "enable_code_ligatures": "Увімкнути лігатури в коді",
+    "enable_changelog_autoscroll": "Автоматичне прокручування до зазначеної версії",
+    "enable_changelog_autoscroll_description": "Автоматичне прокручування до зазначеної версії або до найближчої до неї у журналі змін пакета"
   },
   "i18n": {
     "missing_keys": "Відсутній {count} переклад | Відсутні {count} переклади | Відсутні {count} перекладів",
@@ -336,6 +425,7 @@
       "forgejo": "Переглянути на Forgejo",
       "gitea": "Переглянути на Gitea",
       "gitee": "Переглянути на Gitee",
+      "pushin": "Переглянути на Pushin",
       "radicle": "Переглянути на Radicle",
       "socket_dev": "Переглянути на socket.dev",
       "sourcehut": "Переглянути на SourceHut",
@@ -344,7 +434,8 @@
     "collapse": "Згорнути",
     "collapse_with_name": "Згорнути {name}",
     "expand": "Розгорнути",
-    "expand_with_name": "Розгорнути {name}"
+    "expand_with_name": "Розгорнути {name}",
+    "copyMdError": "Не вдалося завантажити markdown, повторіть спробу пізніше"
   },
   "profile": {
     "display_name": "Відображуване ім'я",
@@ -370,6 +461,7 @@
     "verified_provenance": "Перевірене походження",
     "navigation": "Пакет",
     "copy_name": "Скопіювати назву пакета",
+    "copy_version": "Скопіювати версію пакета",
     "deprecation": {
       "package": "Цей пакет більше не підтримується.",
       "version": "Ця версія більше не підтримується.",
@@ -394,6 +486,8 @@
       "example": "Приклад:",
       "native": "Це можна замінити на {replacement}, доступне з Node {nodeVersion}.",
       "native_no_version": "Цей пакет можна замінити на {replacement}.",
+      "simple": "Цей пакет було позначено як зайвий із порадою: {replacement}",
+      "documented": "Цей пакет було позначено як такий, що має більш продуктивні альтернативи.",
       "none": "Цей пакет було позначено як більше не необхідний, і його функціональність, ймовірно, доступна в усіх системах.",
       "learn_more": "Дізнатися більше",
       "learn_more_above": "Дізнатися більше вище.",
@@ -411,7 +505,10 @@
       "size_tooltip": {
         "unpacked": "{size} у розпакованому вигляді (цей пакет)",
         "total": "{size} загальний розмір у розпакованому вигляді (включно з {count} залежністю для linux-x64) | {size} загальний розмір у розпакованому вигляді (включно з {count} залежностями для linux-x64) | {size} загальний розмір у розпакованому вигляді (включно з {count} залежностями для linux-x64)"
-      }
+      },
+      "main_information": "Основна інформація",
+      "trends": "Тенденції",
+      "version_distribution": "Розподіл версій"
     },
     "skills": {
       "title": "Навички агента",
@@ -441,7 +538,9 @@
       "docs": "документація",
       "fund": "спонсорство",
       "compare": "порівняти",
-      "timeline": "хронологія"
+      "timeline": "хронологія",
+      "stats": "статистика",
+      "changelog": "журнал змін"
     },
     "likes": {
       "like": "Подобається цей пакет",
@@ -466,17 +565,30 @@
       "pm_label": "Менеджер пакетів",
       "copy_command": "Копіювати команду встановлення",
       "copy_dev_command": "Копіювати команду встановлення для розробки",
+      "copy_types_command": "Копіювати команду встановлення типів",
       "dev_dependency_hint": "Зазвичай встановлюється як залежність для розробки",
-      "view_types": "Переглянути {package}"
+      "view_types": "Переглянути {package}",
+      "types_label": "Типи",
+      "collapse_commands": "Згорнути додаткові команди",
+      "expand_commands": "Показати додаткові команди"
     },
     "create": {
       "title": "Створити новий проєкт",
       "copy_command": "Копіювати команду створення",
-      "view": "{packageName} має того ж супроводжувача. Натисніть для деталей."
+      "view": "{packageName} має того ж супровідника. Натисніть для деталей."
     },
     "run": {
       "title": "Запустити",
-      "locally": "Запустити локально"
+      "locally": "Запустити локально",
+      "copy_command": "Копіювати команду для запуску локально"
+    },
+    "command": {
+      "copied_install": "Команду встановлення скопійовано",
+      "copied_dev_install": "Команду встановлення для розробки скопійовано",
+      "copied_run": "Команду запуску скопійовано",
+      "copied_create": "Команду створення скопійовано",
+      "copied_execute": "Команду виконання скопійовано",
+      "copied_skills": "Команду навичок скопійовано"
     },
     "readme": {
       "title": "Readme",
@@ -521,6 +633,7 @@
       "weekly_downloads": "Завантажень на тиждень",
       "keywords": "Ключові слова",
       "license": "Ліцензія",
+      "version": "Версія",
       "select": "Обрати пакет",
       "select_maximum": "Можна обрати не більше {count} пакетів"
     },
@@ -551,6 +664,7 @@
       "grouping_usage_about": "Про групування використання",
       "grouping_usage_all": "Усі",
       "grouping_usage_most_used": "Найбільш популярна",
+      "order_by_downloads": "Сортувати за кількістю завантажень",
       "recent_versions_only_tooltip": "Показувати лише версії, опубліковані за останній рік.",
       "show_low_usage_tooltip": "Включити групи версій з менш ніж 1% від загальних завантажень.",
       "y_axis_label": "Завантаження",
@@ -574,6 +688,7 @@
     "timeline": {
       "load_more": "Завантажити ще",
       "load_error": "Не вдалося завантажити хронологію. Спробуйте пізніше.",
+      "no_stable_versions": "Немає стабільних версій для показу. Вимкніть опцію \"лише стабільні\", щоб включити передвипуски.",
       "size_increase": "Розмір встановлення збільшився на {percent}% ({size})",
       "size_decrease": "Розмір встановлення зменшився на {percent}% ({size})",
       "dep_increase": "Додано {count} залежність | Додано {count} залежності | Додано {count} залежностей",
@@ -587,15 +702,26 @@
       "trusted_publisher_removed": "Довірену публікацію видалено",
       "provenance_added": "Походження увімкнено",
       "provenance_removed": "Походження видалено",
+      "deprecated": "Застаріле",
       "chart": {
         "tab_aria_label": "Вибір метрики",
+        "dependency_size": "Розмір залежності",
+        "other_dependencies": "Інші",
         "base_scale": "починати вісь Y з нуля",
         "zoom": "масштаб",
         "reset_minimap": "скинути мінімапу",
+        "ordered_versions": "тільки стабільні",
+        "sort_label": "Сортувати за",
+        "sort_time": "Час публікації",
+        "sort_semver": "Semver",
         "copy_alt": {
           "key_changes": "Ключові зміни: {version_events}.",
           "version_events": "версія {version}: {events}",
-          "general_description": "Лінійна діаграма показує {metric} пакета {package} від версії {first} до {last}. {metric} у версії {first} становить {first_value}, у версії {last} — {last_value} ({overall_progress_percentage}% загалом). {key_changes} {watermark}."
+          "general_description": "Лінійна діаграма показує {metric} пакета {package} від версії {first} до {last}. {metric} у версії {first} становить {first_value}, у версії {last} — {last_value} ({overall_progress_percentage}% загалом). {key_changes} {watermark}.",
+          "stackbar_segment_share": "{segment}: {value} ({percentage})",
+          "stackbar_top_segments": "У {version} найбільшими сегментами є {segments}.",
+          "stackbar_largest_increase": "Найбільше зростання становить {segment}, на {delta}.",
+          "stackbar_largest_decrease": "Найбільше зниження становить {segment}, на {delta}."
         }
       }
     },
@@ -609,7 +735,8 @@
       "outdated_minor": "{count} мінорна версія позаду (остання: {latest}) | {count} мінорні версії позаду (остання: {latest}) | {count} мінорних версій позаду (остання: {latest})",
       "outdated_patch": "Доступне оновлення (остання версія: {latest})",
       "has_replacement": "Ця залежність має рекомендовані заміни",
-      "vulnerabilities_count": "{count} вразливість | {count} вразливості | {count} вразливостей"
+      "vulnerabilities_count": "{count} вразливість | {count} вразливості | {count} вразливостей",
+      "aliased_to": "Псевдонім до {name}"
     },
     "peer_dependencies": {
       "title": "Peer-залежності ({count})",
@@ -622,8 +749,8 @@
       "show_all": "показати {count} опціональну залежність | показати {count} опціональні залежності | показати {count} опціональних залежностей"
     },
     "maintainers": {
-      "title": "Супроводжувачі",
-      "list_label": "Супроводжувачі пакета",
+      "title": "Супровідники",
+      "list_label": "Супровідники пакета",
       "you": "(ви)",
       "via": "через {teams}",
       "remove_owner": "Видалити {name} як власника",
@@ -653,24 +780,27 @@
       "granularity_yearly": "Щорічні",
       "start_date": "Початок",
       "end_date": "Кінець",
+      "last_recorded_value": "* Останнє записане значення",
       "loading": "Завантаження...",
       "date_range": "{start} до {end}",
       "date_range_multiline": "{start}\nдо {end}",
       "download_file": "Завантажити {fileType}",
+      "copy_file": "Копіювати {fileType}",
       "toggle_annotator": "Перемкнути анотатор",
       "toggle_stack_mode": "Перемкнути режим стека",
       "open_options": "Відкрити параметри",
       "close_options": "Закрити параметри",
       "legend_estimation": "Оцінка",
       "no_data": "Дані недоступні",
+      "no_data_short": "Немає даних",
       "y_axis_label": "{granularity} {facet}",
       "facet": "Аспект",
       "title": "Тенденції",
-      "contributors_skip": "Не показані в Супроводжувачах (немає GitHub репозиторія):",
+      "contributors_skip": "Не показані в Учасниках (немає GitHub репозиторія):",
       "items": {
         "downloads": "Завантаження",
         "likes": "Вподобання",
-        "contributors": "Супроводжувачі"
+        "contributors": "Учасники"
       },
       "data_correction": "Корекція даних",
       "average_window": "Вікно усереднення",
@@ -691,6 +821,7 @@
         "trend_undefined": "невизначена (недостатньо даних)",
         "button_label": "Копіювати альтернативний текст",
         "watermark": "Знизу є водяний знак із текстом \"./npmx a fast, modern browser for the npm registry\"",
+        "watermark_top": "Вгорі є водяний знак із текстом \"./npmx a fast, modern browser for the npm registry\"",
         "analysis": "{package_name} починається зі значення {start_value} і закінчується на {end_value}, демонструючи {trend} тенденцію з нахилом {downloads_slope} завантажень за часовий інтервал",
         "estimation": "Кінцеве значення є оцінкою, заснованою на часткових даних за поточний період.",
         "estimations": "Кінцеві значення є оцінками, заснованими на часткових даних за поточний період.",
@@ -699,10 +830,21 @@
         "general_description": "Вісь Y відображає кількість завантажень. Вісь X відображає діапазон дат, від {start_date} до {end_date}, з часовим інтервалом {granularity}.{estimation_notice} {packages_analysis}. {watermark}.",
         "facet_bar_general_description": "Горизонтальна стовпчаста діаграма для {packages}, порівнюється {facet} ({description}). {facet_analysis} {watermark}.",
         "facet_bar_analysis": "{package_name} має значення {value}."
+      },
+      "embedding": {
+        "chart": "Вбудувати цю діаграму",
+        "copy_url": "Скопіювати цю URL-адресу, щоб вбудувати діаграму на свій веб-сайт",
+        "preview": "Попередній перегляд",
+        "tip": "Якщо в URL-адресі не вказано початкову та кінцеву дату, графік за замовчуванням відображатиме дані за останні 12 місяців."
+      },
+      "sparkline_zoom_reset": {
+        "title": "Скинути масштаб · двічі клацніть діаграму або натисніть Esc",
+        "aria_label": "Скинути масштаб"
       }
     },
     "downloads": {
       "title": "Завантажень на тиждень",
+      "version_distribution_title": "щотижневі завантаження для версії {version}",
       "community_distribution": "Переглянути розподіл впровадження у спільноті",
       "subtitle": "Для всіх версій",
       "sparkline_nav_hint": "Використовуйте ← →"
@@ -780,7 +922,7 @@
     },
     "skeleton": {
       "loading": "Завантаження деталей пакета",
-      "maintainers": "Супроводжувачі",
+      "maintainers": "Супровідники",
       "keywords": "Ключові слова",
       "versions": "Версії",
       "dependencies": "Залежності"
@@ -1017,7 +1159,8 @@
     },
     "file_path": "Шлях до файлу",
     "binary_file": "Бінарний файл",
-    "binary_rendering_warning": "Попередній перегляд файлів типу \"{contentType}\" не підтримується"
+    "binary_rendering_warning": "Попередній перегляд файлів типу \"{contentType}\" не підтримується",
+    "possibly_unnecessary": "Може бути непотрібним в опублікованому пакеті"
   },
   "badges": {
     "provenance": {
@@ -1104,7 +1247,7 @@
       "description": "Опис",
       "downloads": "Завантажень/тиж",
       "published": "Остання публікація",
-      "maintainers": "Супроводжувачі",
+      "maintainers": "Супровідники",
       "keywords": "Ключові слова",
       "security": "Безпечність",
       "selection": "Обрати пакет"
@@ -1164,15 +1307,20 @@
       }
     },
     "sponsors": {
-      "title": "Спонсори"
+      "title": "Спонсори",
+      "gold": "Золоті спонсори",
+      "silver": "Срібні спонсори"
     },
     "oss_partners": {
       "title": "Партнери відкритого ПЗ"
     },
     "team": {
       "title": "Команда",
+      "core": "Основний склад",
+      "maintainers": "Супровідники",
+      "role_core": "основний",
       "role_steward": "стюард",
-      "role_maintainer": "супроводжувач",
+      "role_maintainer": "супровідник",
       "sponsor": "спонсор",
       "sponsor_aria": "Спонсорувати {name} на GitHub"
     },
@@ -1207,6 +1355,64 @@
       }
     }
   },
+  "sponsors_page": {
+    "title": "Спонсори",
+    "heading": "спонсори",
+    "meta_description": "Підтримайте npmx і допоможіть нам прискорити роботу екосистеми щодо безпеки, довіри, оптимізації та досліджень.",
+    "intro": "Підтримайте npmx і допоможіть нам розвивати роботу екосистеми, яку ми виконуємо для розробників та супровідників.",
+    "what_we_do": {
+      "title": "Що ми робимо",
+      "description": "Ми будуємо екосистему, яка вирішує проблеми безпеки, довіри, оптимізації та досліджень для інструментів, які ми використовуємо у повсякденній розробці — швидко, зручно та якісно. Цей проєкт створено розробниками для розробників. Як автори бібліотек широкого використання, ми розуміємо потреби команди і активно вивчаємо, що найбільше потрібно супровідникам та проєктам."
+    },
+    "what_support_means": {
+      "title": "Що означає підтримка",
+      "description": "Наші плани та зв’язки постійно розширюються, як і наше бажання ділитися тим, що ми створили, та вчитися у інших. Ваша підтримка допомагає фінансувати проєкт, виступи на зовнішніх заходах, конференції та розвиток екосистеми в цілому, а головне — дає нам змогу й надалі розширювати нашу спільноту."
+    },
+    "cta": "Переглянути рівні спонсорства",
+    "community_growth_footnote": "* Згідно з {link} дослідженням за 1 квартал 2026 року.",
+    "what_this_means_for_you": {
+      "title": "Що це означає для вас",
+      "description": "npmx — це не лише покращення досвіду розробників та усунення критичних щоденних прогалин. За перші шість місяців ми вже стали основним джерелом інформації для тисяч команд та величезної кількості розробників. Ви отримуєте не лише більш стабільний інструмент для своїх команд, а й можливість заявити про себе перед постійно зростаючою аудиторією провідних інженерів.",
+      "cards": {
+        "people": {
+          "contributors": "учасників",
+          "community_members": "членів спільноти"
+        },
+        "visitors": {
+          "description": "унікальних місячних відвідувачів"
+        },
+        "stars": {
+          "title": "зірок"
+        },
+        "community": {
+          "title": "Швидкозростаючі",
+          "description": "Ми є однією з найбільш швидкозростаючих спільнот в екосистемі"
+        },
+        "adoption": {
+          "title": "Впровадження",
+          "description": "діаграми на конференціях, виступах і статтях спираються на наші дані"
+        },
+        "default_source": {
+          "title": "Джерело за замовчуванням",
+          "description": "pnpm визначив npmx як джерело за замовчуванням, і багато пакетів було налаштовано так, щоб вони використовували npmx"
+        }
+      }
+    },
+    "tiers": {
+      "title": "Рівні спонсорства",
+      "per_month": "/місяць",
+      "custom": "Індивідуальний",
+      "silver": {
+        "name": "Срібний"
+      },
+      "gold": {
+        "name": "Золотий"
+      },
+      "platinum": {
+        "name": "Платиновий"
+      }
+    }
+  },
   "account_menu": {
     "connect": "підключити",
     "account": "Обліковий запис",
@@ -1381,6 +1587,10 @@
           "label": "Зірки GitHub",
           "description": "Кількість зірок у репозиторії GitHub"
         },
+        "githubForks": {
+          "label": "Форки GitHub",
+          "description": "Кількість форків у репозиторії GitHub"
+        },
         "githubIssues": {
           "label": "Issues GitHub",
           "description": "Кількість issues у репозиторії GitHub"
@@ -1448,6 +1658,9 @@
     "change_ratio": "Відношення змін",
     "char_edits": "Правки символів",
     "diff_distance": "Відстань різниці",
+    "diff_truncated": "Різницю скорочено для підвищення продуктивності. Показано лише перші змінені рядки.",
+    "large_diff_mode": "Порівняння великого файлу показано з вимкненим об’єднанням редагувань у рядку для підвищення продуктивності.",
+    "large_diff_options_disabled": "Режим великого файлу вимикає об’єднання редагувань у рядку для підвищення продуктивності.",
     "loading_diff": "Завантаження порівняння...",
     "loading_diff_error": "Не вдалося завантажити порівняння",
     "merge_modified_lines": "Об'єднати змінені рядки",
@@ -1661,7 +1874,8 @@
   "logo_menu": {
     "copy_svg": "Копіювати логотип як SVG",
     "copied": "Скопійовано!",
-    "browse_brand": "Переглянути брендбук"
+    "browse_brand": "Переглянути набір матеріалів бренду",
+    "open_new_tab": "Відкрити npmx у новій вкладці"
   },
   "brand": {
     "title": "Бренд",
@@ -1710,6 +1924,15 @@
   },
   "alt_logo_kawaii": "Мила, округла й барвиста версія логотипу npmx.",
   "changelog": {
-    "error": {}
+    "pre_release": "Попередній випуск",
+    "draft": "Чернетка",
+    "no_logs": "На жаль, цей пакет не публікує журнали змін або його формат журналу змін не підтримується.",
+    "error": {
+      "p1": "На жаль, не вдалося завантажити журнал змін для {package}",
+      "p2": "Спробуйте пізніше або {viewon}"
+    },
+    "rate_limit_ungh": "Вибачте, досягнуто обмеження кількості запитів до GitHub. Спробуйте ще раз через деякий час.",
+    "version_unavailable": "Запитана версія недоступна.",
+    "copy_as_markdown": "Копіювати журнал змін як Markdown"
   }
 }

From 1da03e47d629955acd5eb908dc8c58267d5ebae0 Mon Sep 17 00:00:00 2001
From: Iestyn <33298011+IestynGage@users.noreply.github.com>
Date: Sun, 18 Oct 2026 01:28:20 +0000
Subject: [PATCH 18/26] chore(ui): add stories for Sponsors page (#3312)

---
 app/pages/sponsors.stories.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 app/pages/sponsors.stories.ts

diff --git a/app/pages/sponsors.stories.ts b/app/pages/sponsors.stories.ts
new file mode 100644
index 0000000000..1ef5452c31
--- /dev/null
+++ b/app/pages/sponsors.stories.ts
@@ -0,0 +1,17 @@
+import Sponsors from './sponsors.vue'
+import type { Meta, StoryObj } from '@storybook-vue/nuxt'
+import { pageDecorator } from '../../.storybook/decorators'
+
+const meta = {
+  component: Sponsors,
+  parameters: {
+    layout: 'fullscreen',
+  },
+  decorators: [pageDecorator],
+} satisfies Meta<typeof Sponsors>
+
+export default meta
+
+type Story = StoryObj<typeof meta>
+
+export const Default: Story = {}

From ce2da80f18333cdfb2a8432f65701fcb5071d117 Mon Sep 17 00:00:00 2001
From: abeer0 <47961062+iiio2@users.noreply.github.com>
Date: Sun, 18 Oct 2026 01:31:53 +0000
Subject: [PATCH 19/26] fix: add spacing to changelog loading skeleton (#3328)

---
 app/components/Changelog/Skeleton.vue | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/app/components/Changelog/Skeleton.vue b/app/components/Changelog/Skeleton.vue
index 1606140393..d14dc799f6 100644
--- a/app/components/Changelog/Skeleton.vue
+++ b/app/components/Changelog/Skeleton.vue
@@ -1,11 +1,13 @@
 <template>
-  <SkeletonBlock class="h-8 w-40 rounded" />
-  <ul class="ms-3 list-disc my-4 ps-6 marker:color-[--border-hover]">
-    <li class="mb-1" v-for="_n in 5">
-      <SkeletonBlock class="h-7 w-full max-w-2xl rounded" />
-    </li>
-  </ul>
+  <div class="flex flex-col gap-2 pt-3 pb-8">
+    <SkeletonBlock class="h-8 w-40 rounded" />
+    <ul class="ms-3 list-disc my-4 ps-6 marker:color-[--border-hover]">
+      <li class="mb-1" v-for="_n in 5">
+        <SkeletonBlock class="h-7 w-full max-w-2xl rounded" />
+      </li>
+    </ul>
 
-  <SkeletonBlock class="h-5 w-5/6 max-w-2xl rounded" />
-  <SkeletonBlock class="h-5 w-3/4 max-w-2xl rounded" />
+    <SkeletonBlock class="h-5 w-5/6 max-w-2xl rounded" />
+    <SkeletonBlock class="h-5 w-3/4 max-w-2xl rounded" />
+  </div>
 </template>

From 5970ac38fff29a6ef55d496facec06006e9bfc49 Mon Sep 17 00:00:00 2001
From: Zubair Ibn Zamir <zizdjbd@gmail.com>
Date: Sun, 18 Oct 2026 01:49:22 +0000
Subject: [PATCH 20/26] feat(ui): add upm package manager support (#3296)

Co-authored-by: Philippe Serhal <philippe.serhal@gmail.com>
---
 app/components/Package/ManagerSelect.vue    |  3 ++-
 app/utils/install-command.ts                |  9 +++++++++
 app/utils/prehydrate.ts                     | 13 ++++++++++++-
 assets/media/custom-icons.json              |  5 +++++
 test/unit/app/utils/install-command.spec.ts | 12 ++++++++++++
 5 files changed, 40 insertions(+), 2 deletions(-)

diff --git a/app/components/Package/ManagerSelect.vue b/app/components/Package/ManagerSelect.vue
index d554ea439f..605c13c87a 100644
--- a/app/components/Package/ManagerSelect.vue
+++ b/app/components/Package/ManagerSelect.vue
@@ -193,8 +193,9 @@ function handleKeydown(event: KeyboardEvent) {
 :root[data-pm='deno'] [data-pm-select='deno'],
 :root[data-pm='vlt'] [data-pm-select='vlt'],
 :root[data-pm='vp'] [data-pm-select='vp'],
+:root[data-pm='nub'] [data-pm-select='nub'],
 :root[data-pm='ni'] [data-pm-select='ni'],
-:root[data-pm='nub'] [data-pm-select='nub'] {
+:root[data-pm='upm'] [data-pm-select='upm'] {
   display: inline-block;
 }
 
diff --git a/app/utils/install-command.ts b/app/utils/install-command.ts
index 3b34116385..3547bc8ebd 100644
--- a/app/utils/install-command.ts
+++ b/app/utils/install-command.ts
@@ -86,6 +86,15 @@ export const packageManagers = [
     create: 'na create',
     icon: 'i-custom-ni',
   },
+  {
+    id: 'upm',
+    label: 'upm',
+    action: 'add',
+    executeLocal: 'upx',
+    executeRemote: 'upx',
+    create: 'upm create',
+    icon: 'i-custom-upm',
+  },
 ] as const
 
 export type PackageManagerId = (typeof packageManagers)[number]['id']
diff --git a/app/utils/prehydrate.ts b/app/utils/prehydrate.ts
index 119b712835..13c92033c6 100644
--- a/app/utils/prehydrate.ts
+++ b/app/utils/prehydrate.ts
@@ -21,7 +21,18 @@ export function initPreferencesOnPrehydrate() {
     ] satisfies typeof ACCENT_COLOR_IDS)
 
     // Valid package manager IDs
-    const validPMs = new Set(['npm', 'pnpm', 'yarn', 'bun', 'deno', 'vlt', 'vp', 'nub', 'ni'])
+    const validPMs = new Set([
+      'npm',
+      'pnpm',
+      'yarn',
+      'bun',
+      'deno',
+      'vlt',
+      'vp',
+      'nub',
+      'ni',
+      'upm',
+    ])
 
     const validBackgroundThemes = new Set(['neutral', 'stone', 'zinc', 'slate', 'black'])
     const validForegroundThemes = new Set(['muted', 'standard', 'contrast'])
diff --git a/assets/media/custom-icons.json b/assets/media/custom-icons.json
index a66e139b95..15a09c2407 100644
--- a/assets/media/custom-icons.json
+++ b/assets/media/custom-icons.json
@@ -24,6 +24,11 @@
     "width": 12,
     "height": 12
   },
+  "upm": {
+    "body": "<svg xmlns='http://www.w3.org/2000/svg' viewBox='-5 -5 64 64'><path fill='currentColor' d='M51.3 0V54H12.5L0 41.5V0H18.7V37.8H32.6V0Z'/></svg>",
+    "width": 64,
+    "height": 64
+  },
   "license-minified": {
     "body": "<svg width='32' height='32' viewBox='0 0 32 32' fill='none' xmlns='http://www.w3.org/2000/svg'><path fill-rule='evenodd' clip-rule='evenodd' d='M9.9732 16.695C10.9737 18.4278 12.6877 19.4989 14.553 19.7648L14.8871 20.7614L15.3994 20.6191L18.4885 29.8189L19.1237 30.2027L20.6026 29.7899L20.7383 29.2897C20.7383 29.2897 21.821 28.314 21.8917 28.2485L21.7888 27.9428L21.2221 27.9805L21.0069 27.3405L21.5004 27.084L21.2065 26.2073L20.6097 26.1575L20.4209 25.5945L20.8852 25.2498L20.7511 24.8506L20.1681 24.8412L19.889 24.009L20.3669 23.7047L20.3066 23.525C20.1579 23.4992 20.0253 23.4436 19.9178 23.362C19.8103 23.2804 19.7305 23.1746 19.6838 23.0519C19.6435 22.943 19.6433 22.8185 19.6833 22.693C19.7233 22.5674 19.8019 22.4459 19.9098 22.3426L19.7369 21.8344C19.5364 21.787 19.359 21.7019 19.2149 21.5839C19.0708 21.4659 18.9629 21.3176 18.8978 21.1475C18.8425 20.9962 18.8383 20.825 18.8858 20.6507C18.9333 20.4764 19.0307 20.3052 19.1683 20.154L18.9884 19.6188L19.7044 19.42L19.4052 18.5273C22.0253 16.5943 22.8594 13.0146 21.2315 10.195C19.4794 7.16029 15.5388 6.15527 12.4299 7.9502C9.32104 9.74512 8.22112 13.6603 9.9732 16.695ZM13.6196 10.0107C12.8424 10.4595 12.5674 11.4383 13.0054 12.1969C13.4434 12.9556 14.4286 13.2069 15.2058 12.7581C15.983 12.3094 16.258 11.3306 15.82 10.5719C15.382 9.81326 14.3968 9.56201 13.6196 10.0107Z' fill='#E3B234'/><path d='M12.4798 8.03646C15.5428 6.26802 19.4219 7.25987 21.1452 10.2447C22.7464 13.018 21.9268 16.5421 19.3458 18.4463L19.2876 18.4901L19.3105 18.5592L19.5756 19.3522L18.9615 19.523L18.8604 19.5509L18.8935 19.6513L19.0559 20.1338C18.9297 20.2839 18.8365 20.4513 18.7892 20.6249C18.7372 20.8163 18.7407 21.0086 18.8038 21.1814L18.8048 21.1831C18.8763 21.3698 18.9948 21.5328 19.152 21.6615C19.295 21.7785 19.4673 21.8625 19.6581 21.9151L19.7952 22.3185C19.7001 22.4214 19.6274 22.5385 19.5879 22.6626C19.5421 22.8064 19.5411 22.9539 19.5902 23.0864L19.5907 23.0873C19.6442 23.2279 19.7355 23.3492 19.8574 23.4418C19.9634 23.5223 20.0898 23.5771 20.2279 23.6091L20.2465 23.6626L19.8352 23.9249L19.769 23.9665L19.794 24.0411L20.0737 24.8731L20.0957 24.9405L20.1662 24.9415L20.6781 24.9493L20.7661 25.2131L20.3615 25.5143L20.3029 25.5572L20.3258 25.6263L20.5145 26.1894L20.5357 26.2516L20.6013 26.2577L21.1316 26.3011L21.3782 27.0349L20.9611 27.252L20.8847 27.2916L20.9124 27.3726L21.1271 28.0121L21.1516 28.0859L21.2287 28.0808L21.7181 28.0475L21.7755 28.2173C21.6761 28.3074 21.4473 28.5164 21.222 28.7195C21.0823 28.8456 20.944 28.9697 20.8414 29.0622C20.7904 29.1082 20.7478 29.1461 20.7181 29.1729C20.7032 29.1863 20.6912 29.1971 20.6832 29.2043C20.6793 29.2078 20.6766 29.2108 20.6745 29.2127C20.6736 29.2135 20.673 29.2145 20.6725 29.215L20.6716 29.2155L20.6492 29.2352L20.6417 29.2632L20.5193 29.7094L19.1888 30.0806L15.6784 19.3774L15.4887 19.4396L18.9446 29.978L18.5705 29.752L15.4942 20.5877L15.4643 20.4968L15.373 20.5224L14.9513 20.6396L14.648 19.7333L14.6287 19.6745L14.5673 19.666C12.7306 19.4042 11.0436 18.3498 10.0594 16.6451C8.33615 13.6602 9.41672 9.8049 12.4798 8.03646ZM13.5696 9.92412C12.7465 10.3993 12.4525 11.4385 12.9193 12.247C13.3861 13.0553 14.4326 13.3196 15.2556 12.8444C16.0786 12.3693 16.373 11.3308 15.9064 10.5224C15.4396 9.71393 14.3927 9.44892 13.5696 9.92412Z' stroke='#212121' stroke-width='0.2'/><path fill-rule='evenodd' clip-rule='evenodd' d='M7.99805 13.3448C7.99805 15.3458 8.94693 17.1303 10.4294 18.2932L10.2204 19.3235L10.7353 19.4563L8.81055 28.9682L9.16876 29.6181L10.6559 30L11.0235 29.6347C11.0235 29.6347 12.449 29.3311 12.543 29.3097L12.6067 28.9935L12.0971 28.7428L12.2308 28.081L12.7864 28.1055L12.9702 27.1994L12.4783 26.8578L12.5963 26.2759L13.1707 26.2095L13.2542 25.7968L12.754 25.4971L12.9284 24.6368L13.4944 24.6123L13.532 24.4265C13.4161 24.3298 13.3291 24.2154 13.2768 24.0909C13.2246 23.9665 13.2083 23.835 13.2292 23.7054C13.2487 23.5909 13.3108 23.4831 13.4083 23.3943C13.5057 23.3055 13.6345 23.2396 13.7795 23.2041L13.884 22.6775C13.734 22.5363 13.6229 22.3738 13.5571 22.1996C13.4913 22.0254 13.4721 21.843 13.5007 21.6631C13.5284 21.5045 13.6105 21.3541 13.7387 21.2269C13.867 21.0997 14.0369 21.0001 14.2317 20.938L14.3435 20.3846L15.063 20.5704L15.2502 19.6476C18.4858 19.2837 20.998 16.6006 20.998 13.3448C20.998 9.84068 18.0879 7 14.498 7C10.9082 7 7.99805 9.84068 7.99805 13.3448ZM14.498 9.37931C13.6006 9.37931 12.873 10.0895 12.873 10.9655C12.873 11.8416 13.6006 12.5517 14.498 12.5517C15.3955 12.5517 16.123 11.8416 16.123 10.9655C16.123 10.0895 15.3955 9.37931 14.498 9.37931Z' fill='#E3B234'/><path d='M14.498 7.09961C18.0349 7.09961 20.8984 9.89811 20.8984 13.3447C20.8984 16.5471 18.4266 19.1892 15.2393 19.5479L15.167 19.5566L15.1523 19.6279L14.9854 20.4473L14.3682 20.2881L14.2666 20.2617L14.2451 20.3652L14.1445 20.8643C13.9602 20.9312 13.7957 21.0295 13.668 21.1562C13.5272 21.296 13.4341 21.4643 13.4023 21.6455V21.6475C13.371 21.8449 13.392 22.0453 13.4639 22.2354C13.5292 22.4082 13.6364 22.5671 13.7754 22.708L13.6924 23.126C13.5586 23.1675 13.4371 23.2326 13.3408 23.3203C13.2293 23.4219 13.1547 23.5492 13.1309 23.6885V23.6895C13.1069 23.8381 13.1253 23.9887 13.1846 24.1299C13.2361 24.2525 13.3182 24.3632 13.4219 24.46L13.4111 24.5156L12.9238 24.5371L12.8457 24.54L12.8301 24.6172L12.6562 25.4775L12.6416 25.5469L12.7021 25.583L13.1416 25.8457L13.0859 26.1182L12.585 26.1768L12.5127 26.1846L12.498 26.2559L12.3799 26.8379L12.3672 26.9023L12.4209 26.9404L12.8584 27.2432L12.7051 28.002L12.2354 27.9814L12.1494 27.9775L12.1328 28.0615L11.999 28.7227L11.9834 28.7988L12.0527 28.833L12.4932 29.0488L12.458 29.2246C12.3268 29.253 12.0242 29.3195 11.7275 29.3828C11.5435 29.4221 11.3617 29.4605 11.2266 29.4893C11.1594 29.5036 11.1035 29.5151 11.0645 29.5234C11.0449 29.5276 11.029 29.531 11.0186 29.5332C11.0134 29.5343 11.0095 29.5356 11.0068 29.5361C11.0055 29.5364 11.0046 29.537 11.0039 29.5371H11.0029L10.9736 29.543L10.9531 29.5635L10.624 29.8887L9.28613 29.5449L11.5977 18.5205L11.4023 18.4795L9.12598 29.334L8.91504 28.9512L10.833 19.4766L10.8525 19.3828L10.7607 19.3594L10.3369 19.25L10.5273 18.3135L10.54 18.2529L10.4912 18.2148C9.03142 17.0697 8.09766 15.3131 8.09766 13.3447C8.09771 9.89811 10.9612 7.09961 14.498 7.09961ZM14.498 9.2793C13.5476 9.2793 12.7734 10.0323 12.7734 10.9658C12.7736 11.8992 13.5478 12.6514 14.498 12.6514C15.4483 12.6514 16.2225 11.8992 16.2227 10.9658C16.2227 10.0323 15.4484 9.2793 14.498 9.2793Z' stroke='#212121' stroke-width='0.2'/><path d='M16.5 1.59961C19.4823 1.59961 21.9004 4.01766 21.9004 7C21.9004 8.11634 21.5606 9.15284 20.9805 10.0137C20.6262 9.46909 20.2023 8.99435 19.7256 8.5957C19.9641 8.11445 20.0996 7.57321 20.0996 7C20.0996 5.01177 18.4882 3.40039 16.5 3.40039C14.5118 3.40039 12.9004 5.01177 12.9004 7C12.9004 7.05794 12.9016 7.11556 12.9043 7.17285C12.9137 7.37202 12.9389 7.56734 12.9795 7.75684C13.1251 8.43693 13.4627 9.04652 13.9326 9.52441C14.0952 9.68974 14.274 9.8391 14.4658 9.9707C14.7832 10.1885 15.1379 10.3554 15.5176 10.4629C15.5895 10.5412 15.6554 10.6275 15.7109 10.7236C15.858 10.9784 15.9195 11.2589 15.9062 11.5322C15.7767 11.8375 15.5462 12.0907 15.2539 12.2539C14.4976 12.0752 13.8023 11.739 13.2061 11.2793L12.9531 11.0723C12.2728 10.4779 11.7386 9.71165 11.4238 8.84668C11.3167 8.55215 11.2345 8.24561 11.1797 7.92969C11.1273 7.62785 11.0996 7.31695 11.0996 7C11.0996 4.01766 13.5177 1.59961 16.5 1.59961Z' fill='#E3B234' stroke='#212121' stroke-width='0.2'/></svg>",
     "width": 32,
diff --git a/test/unit/app/utils/install-command.spec.ts b/test/unit/app/utils/install-command.spec.ts
index a3c07039fa..ec6aff0831 100644
--- a/test/unit/app/utils/install-command.spec.ts
+++ b/test/unit/app/utils/install-command.spec.ts
@@ -37,6 +37,7 @@ describe('install command generation', () => {
         ['vlt', 'lodash'],
         ['vp', 'lodash'],
         ['nub', 'lodash'],
+        ['upm', 'lodash'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getPackageSpecifier({
@@ -58,6 +59,7 @@ describe('install command generation', () => {
         ['vlt', '@trpc/server'],
         ['vp', '@trpc/server'],
         ['nub', '@trpc/server'],
+        ['upm', '@trpc/server'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getPackageSpecifier({
@@ -79,6 +81,7 @@ describe('install command generation', () => {
         ['vlt', '@vue/shared'],
         ['vp', '@vue/shared'],
         ['nub', '@vue/shared'],
+        ['upm', '@vue/shared'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getPackageSpecifier({
@@ -102,6 +105,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install lodash'],
         ['vp', 'vp add lodash'],
         ['nub', 'nub add lodash'],
+        ['upm', 'upm add lodash'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -123,6 +127,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install lodash@4.17.21'],
         ['vp', 'vp add lodash@4.17.21'],
         ['nub', 'nub add lodash@4.17.21'],
+        ['upm', 'upm add lodash@4.17.21'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -145,6 +150,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install -D eslint'],
         ['vp', 'vp add -D eslint'],
         ['nub', 'nub add -D eslint'],
+        ['upm', 'upm add -D eslint'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -167,6 +173,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install @trpc/server'],
         ['vp', 'vp add @trpc/server'],
         ['nub', 'nub add @trpc/server'],
+        ['upm', 'upm add @trpc/server'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -188,6 +195,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install @trpc/server@10.0.0'],
         ['vp', 'vp add @trpc/server@10.0.0'],
         ['nub', 'nub add @trpc/server@10.0.0'],
+        ['upm', 'upm add @trpc/server@10.0.0'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -210,6 +218,7 @@ describe('install command generation', () => {
         ['vlt', 'vlt install @vue/shared'],
         ['vp', 'vp add @vue/shared'],
         ['nub', 'nub add @vue/shared'],
+        ['upm', 'upm add @vue/shared'],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getInstallCommand({
@@ -384,6 +393,7 @@ describe('install command generation', () => {
         ['vlt', ['vlx', 'eslint']],
         ['vp', ['vp', 'exec', 'eslint']],
         ['nub', ['nubx', 'eslint']],
+        ['upm', ['upx', 'eslint']],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getExecuteCommandParts({
@@ -405,6 +415,7 @@ describe('install command generation', () => {
         ['vlt', ['vlx', 'degit']],
         ['vp', ['vp', 'dlx', 'degit']],
         ['nub', ['nubx', 'degit']],
+        ['upm', ['upx', 'degit']],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getExecuteCommandParts({
@@ -426,6 +437,7 @@ describe('install command generation', () => {
         ['vlt', ['vlx', 'vite']],
         ['vp', ['vp', 'create', 'vite']],
         ['nub', ['nub', 'create', 'vite']],
+        ['upm', ['upm', 'create', 'vite']],
       ] as const)('%s → %s', (pm, expected) => {
         expect(
           getExecuteCommandParts({

From 6804396b7f3d181fec23ca4a43ee00df3d6849a9 Mon Sep 17 00:00:00 2001
From: Julien Huang <julien.h.dev@gmail.com>
Date: Sun, 18 Oct 2026 01:57:45 +0000
Subject: [PATCH 21/26] chore: update storybook and @storybook-vue/nuxt (#3300)

---
 .storybook/main.ts  | 111 --------
 pnpm-lock.yaml      | 650 +++++++++++++++++++++++++-------------------
 pnpm-workspace.yaml |  10 +-
 3 files changed, 381 insertions(+), 390 deletions(-)

diff --git a/.storybook/main.ts b/.storybook/main.ts
index 4bbea4fce3..ddca2df90c 100644
--- a/.storybook/main.ts
+++ b/.storybook/main.ts
@@ -1,6 +1,4 @@
 import type { StorybookConfig } from '@storybook-vue/nuxt'
-import { readFileSync } from 'node:fs'
-import { resolve } from 'node:path'
 
 const config = {
   stories: [
@@ -23,115 +21,6 @@ const config = {
   async viteFinal(newConfig) {
     newConfig.plugins ??= []
 
-    // Fix: Nuxt's generated #internal/nuxt/paths (<buildDir>/paths.mjs) calls
-    // getAppConfig() during module evaluation (#build/fetch.mjs → baseURL()). Without an
-    // SSR payload, Nuxt's client useRuntimeConfig shim returns undefined and `.app`
-    // throws, so fall back to an empty config.
-    newConfig.plugins.unshift({
-      name: 'storybook-nuxt-paths-app-config',
-      enforce: 'pre',
-      transform(code, id) {
-        if (!/paths\.mjs(?:$|\?)/.test(id)) return
-        return code.replace(
-          'const getAppConfig = () => useRuntimeConfig().app',
-          'const getAppConfig = () => useRuntimeConfig()?.app ?? {}',
-        )
-      },
-    })
-
-    // Fix: nuxt:components:imports-alias relies on internal Nuxt state that is
-    // cleaned up after nuxt.close() in @storybook-vue/nuxt's loadNuxtViteConfig.
-    // When that state is gone, `import X from '#components'` is left unresolved
-    // and Vite 8 falls through to package-subpath resolution, which fails with
-    // "Missing '#components' specifier in 'nuxt' package".
-    // This plugin intercepts #components first and serves a virtual module built
-    // from the components.d.ts written during the same Nuxt boot.
-    // Resolve the Nuxt build dir from Vite's alias map, which can be either a
-    // plain-object (Record<string, string>) or Vite's resolved array form
-    // (readonly Alias[] where find is string | RegExp). We must handle both
-    // without casting to Record<string, string>, which would be unsound for the
-    // array form.
-    const aliases = newConfig.resolve?.alias
-    const buildDir = (() => {
-      if (!aliases) return undefined
-      if (Array.isArray(aliases)) {
-        const entry = aliases.find(a => a.find === '#build')
-        return typeof entry?.replacement === 'string' ? entry.replacement : undefined
-      }
-      const value = (aliases as Record<string, unknown>)['#build']
-      return typeof value === 'string' ? value : undefined
-    })()
-    newConfig.plugins.unshift({
-      name: 'storybook-nuxt-components',
-      enforce: 'pre',
-      resolveId(id) {
-        if (id === '#components') return '\0virtual:#components'
-        return null
-      },
-      load(id) {
-        if (id !== '\0virtual:#components') return
-        if (!buildDir) {
-          throw new Error('[storybook-nuxt-components] Could not resolve the `#build` alias.')
-        }
-        const dtsPath = resolve(buildDir, 'components.d.ts')
-        // Wire the generated declaration file into Vite's file-watch graph so
-        // that the virtual module is invalidated when Nuxt regenerates it.
-        this.addWatchFile(dtsPath)
-        const dts = readFileSync(dtsPath, 'utf-8')
-        const lines: string[] = []
-        // Match only the direct `typeof import("…").default` form.
-        // Lazy/island wrappers (LazyComponent<T>, IslandComponent<T>) are
-        // excluded intentionally — Storybook only needs the concrete type.
-        // The format has been stable across all Nuxt 3 releases.
-        const re =
-          /^export const (\w+): typeof import\("([^"]+)"\)(?:\.default|\[['"]default['"]\])\s*;?$/gm
-        let match: RegExpExecArray | null
-        while ((match = re.exec(dts)) !== null) {
-          const [, name, rel] = match
-          if (!name || !rel) continue
-          const abs = resolve(buildDir, rel).replaceAll('\\', '/')
-          lines.push(`export { default as ${name} } from ${JSON.stringify(abs)}`)
-        }
-        if (lines.length === 0) {
-          throw new Error(
-            `[storybook-nuxt-components] No component exports were found in ${dtsPath}.`,
-          )
-        }
-        return lines.join('\n')
-      },
-    })
-
-    // Bridge compatibility between Storybook v10 core and v9 @storybook-vue/nuxt
-    // v10 expects module federation globals that v9 doesn't provide
-    newConfig.plugins.push({
-      name: 'storybook-v10-compat',
-      transformIndexHtml: {
-        order: 'pre',
-        handler() {
-          return [
-            {
-              tag: 'script',
-              injectTo: 'head-prepend' as const,
-              children: [
-                '// Minimal shims for Storybook v10 module federation system',
-                '// These will be replaced when Storybook runtime loads',
-                'window.__STORYBOOK_MODULE_GLOBAL__ = { global: window };',
-                'window.__STORYBOOK_MODULE_CLIENT_LOGGER__ = {',
-                "  deprecate: console.warn.bind(console, '[deprecated]'),",
-                '  once: console.log.bind(console),',
-                '  logger: console',
-                '};',
-                'window.__STORYBOOK_MODULE_CHANNELS__ = {',
-                '  Channel: class { on() {} off() {} emit() {} once() {} },',
-                '  createBrowserChannel: () => new window.__STORYBOOK_MODULE_CHANNELS__.Channel()',
-                '};',
-              ].join('\n'),
-            },
-          ]
-        },
-      },
-    })
-
     newConfig.plugins.push({
       name: 'ignore-internals',
       transform(_, id) {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2dd5874dfd..079273bae4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -12,23 +12,23 @@ catalogs:
       version: 3.0.2
   storybook:
     '@storybook-vue/nuxt':
-      specifier: https://pkg.pr.new/@storybook-vue/nuxt@1021
-      version: 9.0.1
+      specifier: ^10.0.0
+      version: 10.0.2
     '@storybook/addon-a11y':
-      specifier: ^10.3.5
-      version: 10.5.5
+      specifier: ^10.6.0
+      version: 10.6.2
     '@storybook/addon-docs':
-      specifier: ^10.3.5
-      version: 10.5.5
+      specifier: ^10.6.0
+      version: 10.6.2
     '@storybook/addon-themes':
-      specifier: ^10.3.5
-      version: 10.5.5
+      specifier: ^10.6.0
+      version: 10.6.2
     msw-storybook-addon:
       specifier: ^3.0.0
       version: 3.0.0
     storybook:
-      specifier: ^10.3.1
-      version: 10.5.5
+      specifier: ^10.6.0
+      version: 10.6.2
     storybook-i18n:
       specifier: ^10.1.1
       version: 10.1.1
@@ -218,7 +218,7 @@ importers:
         version: 3.3.0
       nuxt:
         specifier: 4.5.2
-        version: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+        version: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nuxt-og-image:
         specifier: ^6.7.5
         version: 6.7.5(@nuxt/schema@4.5.2)(@oxc-project/types@0.153.0)(@takumi-rs/core@2.9.2)(@takumi-rs/wasm@2.9.2)(@unhead/vue@3.3.1)(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(fontless@0.2.1)(nitropack@2.13.4)(nuxt@4.5.2)(playwright-core@1.62.1)(rolldown@1.2.4)(rollup@4.62.2)(sharp@0.35.3)(supports-color@10.2.2)(tailwindcss@4.3.3)(unifont@0.7.4)(unstorage@1.17.5)(vue@3.5.42)(webpack@5.108.4)(zod@4.6.5)
@@ -272,7 +272,7 @@ importers:
         version: 2.0.0(@vite-pwa/assets-generator@2.0.0)(@voidzero-dev/vite-plus-core@1.1.0)(supports-color@10.2.2)(workbox-build@7.4.1)(workbox-window@7.4.1)
       vite-plus:
         specifier: catalog:vite-plus
-        version: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
+        version: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
       vue:
         specifier: 3.5.42
         version: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
@@ -297,16 +297,16 @@ importers:
         version: 1.62.1
       '@storybook-vue/nuxt':
         specifier: catalog:storybook
-        version: https://pkg.pr.new/@storybook-vue/nuxt@1021(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(storybook@10.5.5)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(unplugin@3.3.0)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
+        version: 10.0.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(storybook@10.6.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(unplugin@3.3.0)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
       '@storybook/addon-a11y':
         specifier: catalog:storybook
-        version: 10.5.5(storybook@10.5.5)
+        version: 10.6.2(storybook@10.6.2)
       '@storybook/addon-docs':
         specifier: catalog:storybook
-        version: 10.5.5(@types/react@19.2.17)(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)
+        version: 10.6.2(@types/react@19.2.17)(storybook@10.6.2)
       '@storybook/addon-themes':
         specifier: catalog:storybook
-        version: 10.5.5(storybook@10.5.5)
+        version: 10.6.2(storybook@10.6.2)
       '@types/node':
         specifier: 24.13.3
         version: 24.13.3
@@ -360,7 +360,7 @@ importers:
         version: 3.0.2(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(graphql@16.14.2)(supports-color@10.2.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       msw-storybook-addon:
         specifier: catalog:storybook
-        version: 3.0.0(msw@3.0.2)(storybook@10.5.5)
+        version: 3.0.0(msw@3.0.2)(storybook@10.6.2)
       rolldown:
         specifier: 1.2.4
         version: 1.2.4
@@ -369,10 +369,10 @@ importers:
         version: 2.0.0(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       storybook:
         specifier: catalog:storybook
-        version: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+        version: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       storybook-i18n:
         specifier: catalog:storybook
-        version: 10.1.1(react@19.2.8)(storybook@10.5.5)
+        version: 10.1.1(react@19.2.8)(storybook@10.6.2)
       typescript:
         specifier: npm:typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
         version: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
@@ -445,7 +445,7 @@ importers:
         version: 5.12.3(a25209bbc139a26d26ca77cb8ba90a1c)
       nuxt:
         specifier: 4.5.2
-        version: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+        version: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       tailwindcss:
         specifier: 4.3.3
         version: 4.3.3
@@ -1367,9 +1367,15 @@ packages:
       oxlint:
         optional: true
 
+  '@emnapi/core@1.11.0':
+    resolution: {integrity: sha512-l9Oo58x0HOP5znGzVhYW9U3e5wVuA4LAZU2AGezTmkhO1CgQRFDhDg4nneHsu/t3WniXg9QrG2nIXL/ZS8ln8Q==}
+
   '@emnapi/core@1.11.2':
     resolution: {integrity: sha512-TC8MkTuZUtcTSiFeuC0ksCh9QIJ5+F21MvZ4Wn4ORfYaFJ/0dsiudv5tVkejgwZlwQ39jL9WWDe2lz8x0WglOA==}
 
+  '@emnapi/runtime@1.11.0':
+    resolution: {integrity: sha512-55coeOFKHv1ywEcUXJtWU5f+Jr/W5tZDvZig8DLKSwUN1JpROQ4rk/SNOQiFWmaR/VKF4zuFyW1B8JduOSv6Pg==}
+
   '@emnapi/runtime@1.11.2':
     resolution: {integrity: sha512-kyOl3X0DuTiT1h2ft8r2fYO8JYtU9a9Xis/zBSiGArNaagCOWx90N1k2wxp18czFDH+OgcWGb5ZP/XMt3dcyPA==}
 
@@ -2954,104 +2960,207 @@ packages:
   '@oxc-project/types@0.153.0':
     resolution: {integrity: sha512-jSNrRIyvPVLL5E1z/tS5zLAprosGz/FuI1PWwEOz59j3E4TTTzSpqKb/RDGqJhhW0QHYISGXxq582wGx6T11Tw==}
 
+  '@oxc-resolver/binding-android-arm-eabi@11.21.2':
+    resolution: {integrity: sha512-xQoCRv+gKax9KTdwdaQNnAFOai8neay7g3jExDIORzhbrejwGSJaZNTdOJHR5ziLg2joMxOCMOFMo4zuxza2uQ==}
+    cpu: [arm]
+    os: [android]
+
   '@oxc-resolver/binding-android-arm-eabi@11.24.2':
     resolution: {integrity: sha512-y09e0L0SRI2OA2tUIrjBgoV3eH5hvUKXNkJqXmNo5V2WxIjyC7I7aJfRLMEVpA8yi95f90gFDvO0VMgrDw+vwA==}
     cpu: [arm]
     os: [android]
 
+  '@oxc-resolver/binding-android-arm64@11.21.2':
+    resolution: {integrity: sha512-HF5oiE2L05yInPYCFD/4uxSrEZW4SuIfn99Y6L1xnJnzl066JR+MJs2rIdstw8A2MPlAKH+13dpFPNycjqzvGg==}
+    cpu: [arm64]
+    os: [android]
+
   '@oxc-resolver/binding-android-arm64@11.24.2':
     resolution: {integrity: sha512-cl4icWaZFnLdg8m6qtnh5rBMuGbxc/ptStFHLeCNwr+2cZjkjNwQu/jYRS0CHlnPecOJMpuS5M6/BH+0J/YkEg==}
     cpu: [arm64]
     os: [android]
 
+  '@oxc-resolver/binding-darwin-arm64@11.21.2':
+    resolution: {integrity: sha512-UX4u49CVCAD8QZNELaW8eMGgMAGwFWYEPbvNsh+3r/gs4NX3KfpiACMVwRQT0EuH3uat9hM5Zl+Ppm9pJD8tgg==}
+    cpu: [arm64]
+    os: [darwin]
+
   '@oxc-resolver/binding-darwin-arm64@11.24.2':
     resolution: {integrity: sha512-At29QEMF6HajbQvgY8K6OXnHD1x9rad74xBEfmCB6ZqCGsdq75aK7tOYcTbOanMy8qdIBrfL3SMr3p/lfSlb9w==}
     cpu: [arm64]
     os: [darwin]
 
+  '@oxc-resolver/binding-darwin-x64@11.21.2':
+    resolution: {integrity: sha512-J9xPx7YBkrRmJ+xl561ztnMWEc1aOyjEIxBiGX1dVb3u7bGSnfObfcZk+Pd+uM0HZAPNsQ1xvD8j52A/uOSqNQ==}
+    cpu: [x64]
+    os: [darwin]
+
   '@oxc-resolver/binding-darwin-x64@11.24.2':
     resolution: {integrity: sha512-A5Kqr1EUj4oIL5CF4WRssq/o5P0Y11cwoFouMRmQ7YnC/A8V93nv1nb7aSU8HwcgmXropjLNkVTl4MN87cu28Q==}
     cpu: [x64]
     os: [darwin]
 
+  '@oxc-resolver/binding-freebsd-x64@11.21.2':
+    resolution: {integrity: sha512-fRlt7OvSaQkWj6+EDTVxawVxOlqJB2QSnBfkeCyK4RTvsGctbw3BiH2Tb7DzMs7bikc4BRBpvWP5zF9K8b54Zg==}
+    cpu: [x64]
+    os: [freebsd]
+
   '@oxc-resolver/binding-freebsd-x64@11.24.2':
     resolution: {integrity: sha512-R5xkRBRRz7ceH/P5Jrc6G7FmdUdgpLYyESFAUDVTNQ9K0sGPxcp4ljiwEwEqsvNcQ4sYbMRrWcHHBCu7ksAJVw==}
     cpu: [x64]
     os: [freebsd]
 
+  '@oxc-resolver/binding-linux-arm-gnueabihf@11.21.2':
+    resolution: {integrity: sha512-gK+vPUcPQITkGwBKpZGrcDHSlU6eDGl7AQacxS2CEKAZIBHWkOVFeJwLZ4tYnA1acJqRM5lt7yYwPCVqGHIJ7A==}
+    cpu: [arm]
+    os: [linux]
+
   '@oxc-resolver/binding-linux-arm-gnueabihf@11.24.2':
     resolution: {integrity: sha512-k/RuYL4L/R58IBn3wT5ma3Wh4k62bp1eYCFRWCmMsasUOqL+H6sW0VGFadEzKWXFFlz+2uIMoeMk9ySSZJHgbg==}
     cpu: [arm]
     os: [linux]
 
+  '@oxc-resolver/binding-linux-arm-musleabihf@11.21.2':
+    resolution: {integrity: sha512-L/Rgas7SrOKy/z7IH+HxSFRqVO4PuLDKLEGKvnhoCBBq3UJ0YzGBou3qMzaAGgkJwsIvX2pBF+7ojzfUhLiZxQ==}
+    cpu: [arm]
+    os: [linux]
+
   '@oxc-resolver/binding-linux-arm-musleabihf@11.24.2':
     resolution: {integrity: sha512-bnHAak3ujYfH5pKk4NieFNbvYvernfoQDgwLddbZ3OtMYrem87/qjlA+u+aKG0oZcqSLGCful/6/CEA+aeAgaA==}
     cpu: [arm]
     os: [linux]
 
+  '@oxc-resolver/binding-linux-arm64-gnu@11.21.2':
+    resolution: {integrity: sha512-CUEYvlX1Fk7E9kUMzuswru1J9HLxMwnpDeQGjQuI4ZH+iNCoa2X9T+pvyzrbsgl7WnIeTFTlNlHsRfVdf5g9/g==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
   '@oxc-resolver/binding-linux-arm64-gnu@11.24.2':
     resolution: {integrity: sha512-vDT3KHgzYp47gmtNOqL2VNhCyl5Zv643eyxm//A68J8DeUGXrvD1pZFiaT4jSfe+RInfnn1R2yVHye4enx6RnA==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
+  '@oxc-resolver/binding-linux-arm64-musl@11.21.2':
+    resolution: {integrity: sha512-ViN1ZibQyxwC67GpoP33oo+S9UyUnkog13vzQb9+v9bCNvrVzJuk0MRdacjtv/9xfRMVF/eqHFyl8YOeykI10Q==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
   '@oxc-resolver/binding-linux-arm64-musl@11.24.2':
     resolution: {integrity: sha512-+kMlQvbzfyEYtu5FcjE4p+ttBLpKW4d/AsAsuE69BxV6V4twZJeIQZFfD8gh/wqglY0MkPSezWXQH0jBV13MUw==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
+  '@oxc-resolver/binding-linux-ppc64-gnu@11.21.2':
+    resolution: {integrity: sha512-CU1sCqWnhGqYD5I1HedHk5pujrn7ssDkNB/AEQd/pd3D/EojVSgJUlpbafwIbyhia3PgIfkvdFpRPWSALzVumA==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
   '@oxc-resolver/binding-linux-ppc64-gnu@11.24.2':
     resolution: {integrity: sha512-shjfMhmZ3gq9fv/w7bi3PnZlgOPG+2QAOFf0BJF0EgBSIGZ6PMLN2zbGEblTUYB/NKVDRyYhE2ff3dJ1QqNPkA==}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
+  '@oxc-resolver/binding-linux-riscv64-gnu@11.21.2':
+    resolution: {integrity: sha512-jWVyZtIHca4Gb96x7dag+y69vlei7ffjrsveLkmf2ZhqEAz6ZSBnY1GWvgZUaZlwZP62A3xD092BW97Q5VGc+g==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
   '@oxc-resolver/binding-linux-riscv64-gnu@11.24.2':
     resolution: {integrity: sha512-zGelwFR5oRo+b69k8Lrzun86DyUHzfKN6cnjbR9l7Z7NIRznOE/2ZvPa1IUKqAL2PzAXOdwkfVqNvO1H2RlpAw==}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
+  '@oxc-resolver/binding-linux-riscv64-musl@11.21.2':
+    resolution: {integrity: sha512-LF29obFqNgBUgDX7rmUK7M4D0JQG5LxhYzn3xXmECcHU9aQAdWG7NiY052qybtesEdwHQXKNTWYQ7mTsybNvWg==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
   '@oxc-resolver/binding-linux-riscv64-musl@11.24.2':
     resolution: {integrity: sha512-qxZ1SWCXJY0eyhAlP6Lmo9F2Nrtx7EkYj9oCgL8apDPCwXwCEDA2U697bbT81JIc2IrVjxO4KX6WU2N+oN9Z4w==}
     cpu: [riscv64]
     os: [linux]
     libc: [musl]
 
+  '@oxc-resolver/binding-linux-s390x-gnu@11.21.2':
+    resolution: {integrity: sha512-+NYcm+cCHBbtdQQ3A4phQTSuVRYnNHz7wrl9XRAPEovcdoqi0mb1K5ZOl+jN54ZD+q1zz3V0vltbFJmzecJKmw==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
   '@oxc-resolver/binding-linux-s390x-gnu@11.24.2':
     resolution: {integrity: sha512-sGCecF3cx2DFlH4t/z7ApnOnXqN48p5p5mlHDEnHTAukQa2P+qMVE4CwyWE9W+q/m3QJ7kKfGrIjax31f44oFQ==}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
+  '@oxc-resolver/binding-linux-x64-gnu@11.21.2':
+    resolution: {integrity: sha512-UQqZDdG2r2HhAOsZEgufkIWHPQ886IUyuJQkoZByvzhW8j51R4UNzGBJFkTiTnLhQnggwJRdJgFWK4uY6ZVIMw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
   '@oxc-resolver/binding-linux-x64-gnu@11.24.2':
     resolution: {integrity: sha512-k/VlMMcSzMlahb3/fENM4rTlsJ0s3fFROA0KXPBmKggqmTSaE383sl8F3KCOXPLmVsYfW6hCitMhXCEtNeZxxg==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
+  '@oxc-resolver/binding-linux-x64-musl@11.21.2':
+    resolution: {integrity: sha512-3Q9PMRjalWkT6NZ4jfujuqTCFwoWErg3y3BnOgb544B8IMw4PktiwWOigMfOHNRLMghZeJ7hpfpZf4CP7rV7Og==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
   '@oxc-resolver/binding-linux-x64-musl@11.24.2':
     resolution: {integrity: sha512-8hbnZyNi97b/8wapYaIF9+t9GmZKBW2vunaOc3h9HGJptH7b7XpvZqOTBSm/MpTjr7H497BlgOaSfLUdhmy2bw==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
+  '@oxc-resolver/binding-openharmony-arm64@11.21.2':
+    resolution: {integrity: sha512-Eljeq3ndtyKhM+Es8LITi4Zl2htzuRZcrPMF3kMCsrILztvU6AjZ3FuEhHHKobPUB9rMpzLpJP5bDqXI7r+iog==}
+    cpu: [arm64]
+    os: [openharmony]
+
   '@oxc-resolver/binding-openharmony-arm64@11.24.2':
     resolution: {integrity: sha512-MvyGik3a6pVgZ0t/kWlbmFxFLmXQJwgLsY2eYFHLpy0wGwRbfzeIGgDwQ3kXqE30z+kSXennRkCrT7TUvkptNg==}
     cpu: [arm64]
     os: [openharmony]
 
+  '@oxc-resolver/binding-wasm32-wasi@11.21.2':
+    resolution: {integrity: sha512-HGDbNsIywqc4LxU38+CTJNnB/6BF7rheWOJ259b4eE0aEnelYblC8x+1tEd63bp31fYne63RQz9Jb4yVnC7Yig==}
+    engines: {node: '>=14.0.0'}
+    cpu: [wasm32]
+
   '@oxc-resolver/binding-wasm32-wasi@11.24.2':
     resolution: {integrity: sha512-vHcssMPwO08RTvj/c0iOBz90attxyG3wQJ0dTcyEQK43LRpcdLWZlV5feBhv6Isn6ahbQIzHbCgfa81+RiML0Q==}
     engines: {node: '>=14.0.0'}
     cpu: [wasm32]
 
+  '@oxc-resolver/binding-win32-arm64-msvc@11.21.2':
+    resolution: {integrity: sha512-iWx25CBEgH49iE9q5coEGI/jb1jl5kkCY9z6U5Og67xCkQ/WFMDc2J5U78+AE91SUxM2NqSLhJC8/PLfWnImww==}
+    cpu: [arm64]
+    os: [win32]
+
   '@oxc-resolver/binding-win32-arm64-msvc@11.24.2':
     resolution: {integrity: sha512-uokJqro2iBqkFvJdKQLP7d8/BUmFwESQFVmIJUQKj1Xn1a/LysJoe1vmeECLF5b3jsV8CAL5sEMJXX6SdK9Nhg==}
     cpu: [arm64]
     os: [win32]
 
+  '@oxc-resolver/binding-win32-x64-msvc@11.21.2':
+    resolution: {integrity: sha512-VPoCAhKvCQTlG7vxqaBXcmuvbh77BfnGXj8g0pbvVXpm1F/R8rDVwqIWcEbMzrI1JvJlm8v7T9uMVQb6UctMRg==}
+    cpu: [x64]
+    os: [win32]
+
   '@oxc-resolver/binding-win32-x64-msvc@11.24.2':
     resolution: {integrity: sha512-UqGPmo56KDfLlfXFAFIrNflHT8tFxWGEivWg3Zeyp4Uy2NlKN1FGPr6/BxcLGG3+kZ6Wp14g5Uj+n71boqZfiw==}
     cpu: [x64]
@@ -4014,77 +4123,40 @@ packages:
   '@standard-schema/spec@1.1.0':
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
 
-  '@storybook-vue/nuxt@https://pkg.pr.new/@storybook-vue/nuxt@1021':
-    resolution: {integrity: sha512-OmpGHtbapfpljOkFY8/g+9EkNa+SPcVAcqOiOPyP6upXMSpwNHHfEXFMBiFWqF7xru82zHg2kkfmWArVpVG7tg==, tarball: https://pkg.pr.new/@storybook-vue/nuxt@1021}
-    version: 9.0.1
-    engines: {node: '>=20.19.0'}
+  '@storybook-vue/nuxt@10.0.2':
+    resolution: {integrity: sha512-NmG1LPhh4kln2UilN1rqTzuJmbIhHHLN2rhudqz5m9QQ8MUuPQqrqLqR6oC2/fJ/wEUb68dtslL39sZ7VfSbdw==}
+    engines: {node: '>=22.0.0'}
     peerDependencies:
       nuxt: ^3.18.1 || ^4.0.0
-      storybook: ^10.3.4
+      storybook: ^10.6.0
       vite: ^5.2.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
       vue: 3.5.42
 
-  '@storybook/addon-a11y@10.5.5':
-    resolution: {integrity: sha512-nsMnSRe7pzepXIkUUqI/rL7sp8juXOluyypU4Dz0UuYHhw/cKaxfzuO+3WJN5EtEr/gcnKYb4awxH/duPGavUw==}
+  '@storybook/addon-a11y@10.6.2':
+    resolution: {integrity: sha512-zleS+btwrTRcUf3opbZntKsEt6PTqAtxsek08tx5jh5fRvd6wWmtnwW3uaBcypfIKnheTB3KGljJwFX+Mc+Umg==}
     peerDependencies:
-      storybook: ^10.5.5
+      storybook: ^10.6.2
 
-  '@storybook/addon-docs@10.5.5':
-    resolution: {integrity: sha512-0YpKlimS4XE0kQ8Maa5coeefQxdyDrBHg1wOP3WTPuBe4FolFSCDveR0ge2+vuUBk+fZfn2+l+3Q2jmAWaRGDg==}
+  '@storybook/addon-docs@10.6.2':
+    resolution: {integrity: sha512-f7Rv/rzX1sk4lUDTeoIRkXWcWvNwLv7vBnfpFGb3f88MliB+M4ZekGKNiKtrmi44uLFt52gzwwPzj2eGDu0DQQ==}
     peerDependencies:
       '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      storybook: ^10.5.5
+      storybook: ^10.6.2
     peerDependenciesMeta:
       '@types/react':
         optional: true
 
-  '@storybook/addon-themes@10.5.5':
-    resolution: {integrity: sha512-ENZCJkvTdGYBRuaE3tEE6jRilMRdGgfYUhnFNEUXAg4II2iVYg9mnrq6tuQfwSVjGuEOTAUen/3YV+l7U4oOOA==}
+  '@storybook/addon-themes@10.6.2':
+    resolution: {integrity: sha512-NGvoAPnWH+WnCNVUAzbDzDQHz2dJNEM5CR0KLGjjDUhHjIvCoAzhD4+SMwnZQqznwm5sgYUdyyKqzrHMeSInog==}
     peerDependencies:
-      storybook: ^10.5.5
+      storybook: ^10.6.2
 
-  '@storybook/builder-vite@10.3.4':
-    resolution: {integrity: sha512-dNQyBZpBKvwmhSTpjrsuxxY8FqFCh0hgu5+46h2WbgQ2Te3pO458heWkGb+QO7mC6FmkXO6j6zgYzXticD6F2A==}
+  '@storybook/builder-vite@10.6.2':
+    resolution: {integrity: sha512-SzeQEGjvybdhP2coF4aIX6JX/7rZTrQCpRU3vAEO/R98Vr3xM8jdg7a3nvt91TeF/P8iWqljLIpaDjTdk2r/sQ==}
     peerDependencies:
-      storybook: ^10.3.4
+      storybook: ^10.6.2
       vite: ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
 
-  '@storybook/csf-plugin@10.3.4':
-    resolution: {integrity: sha512-WPP0Z39o82WiohPkhPOs6z+9yJ+bVvqPz4d+QUPfE6FMvOOBLojlwOcGx6Xmclyn5H/CKwywFrjuz4mBO/nHhA==}
-    peerDependencies:
-      esbuild: '*'
-      rollup: '*'
-      storybook: ^10.3.4
-      vite: '*'
-      webpack: '*'
-    peerDependenciesMeta:
-      esbuild:
-        optional: true
-      rollup:
-        optional: true
-      vite:
-        optional: true
-      webpack:
-        optional: true
-
-  '@storybook/csf-plugin@10.5.5':
-    resolution: {integrity: sha512-/euibhRFqklYCZqUseokojmfYcQpXshVY2QmA1qCuxMz9SzVFD3iSTw+aFLTxpsJGGdcZJk8fnm/rEthLzZ9jA==}
-    peerDependencies:
-      esbuild: '*'
-      rollup: '*'
-      storybook: ^10.5.5
-      vite: '*'
-      webpack: '*'
-    peerDependenciesMeta:
-      esbuild:
-        optional: true
-      rollup:
-        optional: true
-      vite:
-        optional: true
-      webpack:
-        optional: true
-
   '@storybook/global@5.0.0':
     resolution: {integrity: sha512-FcOqPAXACP0I3oJ/ws6/rrPT9WGhu915Cg8D02a9YxLo0DE9zI+a9A5gRGvmQ09fiWPukqI8ZAEoQEdWUKMQdQ==}
 
@@ -4093,31 +4165,39 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
-  '@storybook/react-dom-shim@10.5.5':
-    resolution: {integrity: sha512-PIk7N3LLrZIxfNxmkvmQN1d5UQ70XEedT8n0GhBiXnM6XL09xPGB8n8TZXeJBRYluKhDQcAyQeT0/OZmcDVQJg==}
+  '@storybook/react-dom-shim@10.6.2':
+    resolution: {integrity: sha512-k0262Vqxjk3wHeg3g/QO/ENDrkC7kkbuwsFSXOdYr7Sl888tsF1DAS7uQ/gr+s/BRz1FLYRX7wBY3smEUV4MJg==}
     peerDependencies:
       '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
       '@types/react-dom': ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
       react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      storybook: ^10.5.5
+      storybook: ^10.6.2
     peerDependenciesMeta:
       '@types/react':
         optional: true
       '@types/react-dom':
         optional: true
 
-  '@storybook/vue3-vite@10.3.4':
-    resolution: {integrity: sha512-QJ5oXNfSAnsMbmgQ/XCbWFkFGDdoH9LQtgs4h3rDK2w7bxlw0B7RVEjI3+dxQ5asPa9nl7rPP5lvW92PKVBMAg==}
+  '@storybook/vue3-vite@10.6.2':
+    resolution: {integrity: sha512-xQNrL3vm9GuNndyvNAvnY16xCTBnCOFSxvFuJSWggsdG9ZMXBLkbSBd2yLTxvDVO1EWFJoJa2hFB/VRvLzarzw==}
     peerDependencies:
-      storybook: ^10.3.4
+      storybook: ^10.6.2
+      typescript: '>= 4.9.x'
       vite: ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      typescript:
+        optional: true
 
-  '@storybook/vue3@10.3.4':
-    resolution: {integrity: sha512-OXCH1zpBYmrADV3/RylrwJXWR6vMZtBksu84BShxuVmxr8UDmnB7EVCQTFOHyyCshb+Fn1WVO/lTkWakgoJsHQ==}
+  '@storybook/vue3@10.6.2':
+    resolution: {integrity: sha512-Rkf6GMHQZgFKirb0LDgBrhVUO6wq0p9MA/rLU4YNB2w2cVXctEOpvkp+JCBddhjy41OYZPZaDcp7MApBDk9PRw==}
     peerDependencies:
-      storybook: ^10.3.4
+      storybook: ^10.6.2
+      typescript: '>= 4.9.x'
       vue: 3.5.42
+    peerDependenciesMeta:
+      typescript:
+        optional: true
 
   '@swc/helpers@0.5.23':
     resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
@@ -4394,12 +4474,6 @@ packages:
     resolution: {integrity: sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==}
     engines: {node: '>=14', npm: '>=6', yarn: '>=1'}
 
-  '@testing-library/user-event@14.6.1':
-    resolution: {integrity: sha512-vq7fv0rnt+QTXgPxr5Hjc210p6YKq2kmdziLgnsZGgLJ9e6VAShx1pACLuRjd/AS/sr7phAR58OIIpf0LlmQNw==}
-    engines: {node: '>=12', npm: '>=6'}
-    peerDependencies:
-      '@testing-library/dom': '>=7.21.4'
-
   '@testing-library/user-event@14.6.7':
     resolution: {integrity: sha512-MPCpX8bxe8zS+JmmTwLp8jd0dy1rAm60Te/SL8JrQM3qvQJcBOs1d7IefJMyZzqM3EWBrDn/LWDt1BCGu4ASfg==}
     engines: {node: '>=12', npm: '>=6'}
@@ -5177,26 +5251,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@volar/language-core@2.4.15':
-    resolution: {integrity: sha512-3VHw+QZU0ZG9IuQmzT68IyN4hZNd9GchGPhbD9+pa8CVv7rnoOZwo7T8weIbrRmihqy3ATpdfXFnqRrfPVK6CA==}
-
   '@volar/language-core@2.4.28':
     resolution: {integrity: sha512-w4qhIJ8ZSitgLAkVay6AbcnC7gP3glYM3fYwKV3srj8m494E3xtrCv6E+bWviiK/8hs6e6t1ij1s2Endql7vzQ==}
 
-  '@volar/source-map@2.4.15':
-    resolution: {integrity: sha512-CPbMWlUN6hVZJYGcU/GSoHu4EnCHiLaXI9n8c9la6RaI9W5JHX+NqG+GSQcB0JdC2FIBLdZJwGsfKyBB71VlTg==}
-
   '@volar/source-map@2.4.28':
     resolution: {integrity: sha512-yX2BDBqJkRXfKw8my8VarTyjv48QwxdJtvRgUpNE5erCsgEUdI2DsLbpa+rOQVAJYshY99szEcRDmyHbF10ggQ==}
 
-  '@volar/typescript@2.4.15':
-    resolution: {integrity: sha512-2aZ8i0cqPGjXb4BhkMsPYDkkuc2ZQ6yOpqwAuNwUoncELqoy5fRgOQtLR9gB0g902iS0NAkvpIzs27geVyVdPg==}
-    peerDependencies:
-      typescript: '*'
-    peerDependenciesMeta:
-      typescript:
-        optional: true
-
   '@volar/typescript@2.4.28':
     resolution: {integrity: sha512-Ja6yvWrbis2QtN4ClAKreeUZPVYMARDYZl9LMEv1iQ1QdepB6wn0jTRxA9MftYmYa4DQ4k/DaSZpFPUfxl8giw==}
     peerDependencies:
@@ -5242,9 +5302,6 @@ packages:
   '@vue/compiler-ssr@3.5.42':
     resolution: {integrity: sha512-xmLk3wLkbizPAiLyomjgFFosf2ys9b5Ghb+oh/k2tnvipNz8OFrQOiTcWCzyK7MpBp9KkyGtfvgfLUivbmuGYA==}
 
-  '@vue/compiler-vue2@2.7.16':
-    resolution: {integrity: sha512-qYC3Psj9S/mfu9uVi5WvNZIzq+xnXMhOwbTFKKDD7b1lhpnn71jXSFdTQ+WsIEk0ONCd7VV2IMm7ONl6tbQ86A==}
-
   '@vue/devtools-api@6.6.4':
     resolution: {integrity: sha512-sGhTPMuXqZ1rVOk32RylztWkfXTRhuS7vgAKv0zjqk8gbsHkJ7xfFf+jbySxt7tWObEJwyKaHMikV/WGDiQm8g==}
 
@@ -5262,17 +5319,12 @@ packages:
   '@vue/devtools-shared@8.2.1':
     resolution: {integrity: sha512-Fkac7lUdGReh6pVOi3AYPRGe82LQqRmAfThW7RRligOAP0ZA/Z1z9XLHDM9dv34pV2HRc79DK8uKPeG2fLnA/g==}
 
-  '@vue/language-core@2.2.12':
-    resolution: {integrity: sha512-IsGljWbKGU1MZpBPN+BvPAdr55YPkj2nB/TBNGNC32Vy2qLG25DYu/NBN2vNtZqdRbTRjaoYrahLrToim2NanA==}
-    peerDependencies:
-      typescript: '*'
-    peerDependenciesMeta:
-      typescript:
-        optional: true
-
   '@vue/language-core@3.3.10':
     resolution: {integrity: sha512-CR7ByBbgPHqhxrioKPOcZBqttaozzLNwtkCzXQ+uF8gLPHnUe03srPnGpdtHD3zp+bq5iyVkZ1WNx7W564RPwg==}
 
+  '@vue/language-core@3.3.13':
+    resolution: {integrity: sha512-axA0Xemn5LuUKuKWob0/kVq7xQ2mJJM6VqA9Exvt35nM9yRC31goWVve/G/Zb2ZCLsXC8FHYjjfXlnshknSCew==}
+
   '@vue/language-core@3.3.6':
     resolution: {integrity: sha512-LgBMZAy2sR3cQWknpyaxnI6yBkqDfLBPkbdhwRhQCvzfNJRQXPilgQIrdI/v4ytJ0sAq9bWhaPsjqBqneomJ3Q==}
 
@@ -5673,9 +5725,6 @@ packages:
     resolution: {integrity: sha512-PrqppUmhT4ENdas2pH9caE7efUcxy6EcSFhWzosiVuQBzu2tQ5yLTI6jwomT/1cuBnivzGfxiJCqDNN9FRRh+Q==}
     engines: {node: '>= 14.0.0'}
 
-  alien-signals@1.0.13:
-    resolution: {integrity: sha512-OGj9yyTnJEttvzhTUWuscOvtqxq5vrhF7vL9oS0xJ2mK0ItPYP1/y+vCFebfxoEyAz0++1AIwJ5CMr+Fk3nDmg==}
-
   alien-signals@3.2.1:
     resolution: {integrity: sha512-I8FjmltrfnDFoZedi5CG8DghVYNhzb/Ijluz7tCSJH0xpd0484Kowhbb1XDYOxfJpU1p5wnM2X54dA+IfGyD1g==}
 
@@ -6335,9 +6384,6 @@ packages:
       sqlite3:
         optional: true
 
-  de-indent@1.0.2:
-    resolution: {integrity: sha512-e/1zu3xH5MQryN2zdVaF0OrdNLUbvWxzMbi+iNA6Bky7l1RoP8a2fIbRocyHclXt/arDrrR6lL3TqFD9pMQTsg==}
-
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -7249,10 +7295,6 @@ packages:
   hastscript@9.0.1:
     resolution: {integrity: sha512-g7df9rMFX/SPi34tyGCyUBREQoKkapwdY/T04Qn9TDWfHhAYt4/I0gMVirzK5wEzeUqIjEB+LXC/ypb7Aqno5w==}
 
-  he@1.2.0:
-    resolution: {integrity: sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==}
-    hasBin: true
-
   headers-polyfill@5.0.1:
     resolution: {integrity: sha512-1TJ6Fih/b8h5TIcv+1+Hw0PDQWJTKDKzFZzcKOiW1wJza3XoAQlkCuXLbymPYB8+ZQyw8mHvdw560e8zVFIWyA==}
 
@@ -8666,6 +8708,9 @@ packages:
     resolution: {integrity: sha512-eacM4wMgGWXctHubY262yo+50E76qtQBqe+uK73YEV1IT3qP12Acbnf9Nc8t+agIAdnko9iVT4KF83/d0EjY5w==}
     engines: {node: ^20.19.0 || >=22.12.0}
 
+  oxc-resolver@11.21.2:
+    resolution: {integrity: sha512-w5tLwYN3Zo24w5EeWJjJWZOwhYqTtC8PS2B1tIt7BZUuqTIcU07sQValbDw+rq7+AuAGzOHklgK+ifsy4lpXfw==}
+
   oxc-resolver@11.24.2:
     resolution: {integrity: sha512-FY91FiDBj7ls5MsFS9jN3tjz2o0/zsdSsymlakySaBwVJZorHhkWyICLZMKxlu1R9vYo+sd3z1jwb4J8x7bNDw==}
 
@@ -9729,8 +9774,8 @@ packages:
     peerDependencies:
       storybook: ^9.0.0 || ^10.0.0
 
-  storybook@10.5.5:
-    resolution: {integrity: sha512-UscBIBJDloUeqntukHOhP1a5W/vouePDJbzPSxj466WK801FZtzQiMffMtkjzJiWSuj20wfaYlB2QQKh9aOYAg==}
+  storybook@10.6.2:
+    resolution: {integrity: sha512-qHDINMiapxFUxYb+xC3j8u7Y+85X3u+/PlytE/wmnyg+bU0agCW3jUmWP4vIh2MioO2jTK/2B3Lcw6IpRFzQBA==}
     hasBin: true
     peerDependencies:
       '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
@@ -10042,10 +10087,6 @@ packages:
     resolution: {integrity: sha512-eaBzG6MxNzEn9kiwvtre90cXaNLkmadMWa1zQMs3XORCXNbsH/OewwbxC5ia9dCxIxnTAsSxXJaa/p5y8DlvJg==}
     engines: {node: '>=10'}
 
-  type-fest@2.19.0:
-    resolution: {integrity: sha512-RAH822pAdBgcNMAfWnCBU3CFZcfZ/i1eZjwFU/dsLKumyuuP3niueg2UAukXYF0E2AAoc82ZSSf9J0WQBinzHA==}
-    engines: {node: '>=12.20'}
-
   type-fest@5.8.0:
     resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
     engines: {node: '>=20'}
@@ -10664,8 +10705,8 @@ packages:
   vue-bundle-renderer@2.3.1:
     resolution: {integrity: sha512-7F4LNMopUw5RgYWo4zCmVUHCc6aQRC6dCKHUYkM/n+fux4AUGdL1x6m5A515WWyFysRRN7cx3hBzVqoisfRfzw==}
 
-  vue-component-meta@2.2.12:
-    resolution: {integrity: sha512-dQU6/obNSNbennJ1xd+rhDid4g3vQro+9qUBBIg8HMZH2Zs1jTpkFNxuQ3z77bOlU+ew08Qck9sbYkdSePr0Pw==}
+  vue-component-meta@3.3.13:
+    resolution: {integrity: sha512-VnqcGTxB4n56qWfsuroOL+cEvjkV8uEffGy57bqlzePAQKQMLBXAjIKIntyngunmMnxWHMLzkYgRxdx9I1H/hg==}
     peerDependencies:
       typescript: '*'
     peerDependenciesMeta:
@@ -10680,9 +10721,6 @@ packages:
       typescript:
         optional: true
 
-  vue-component-type-helpers@2.2.12:
-    resolution: {integrity: sha512-YbGqHZ5/eW4SnkPNR44mKVc6ZKQoRs/Rux1sxC6rdwXb4qpbOSYfDr9DsTHolOTGmIKgM9j141mZbBeg05R1pw==}
-
   vue-component-type-helpers@3.3.12:
     resolution: {integrity: sha512-HwCqmgTfLFskQc4P5TRnbduCMyPat2Ezu0elLWOGn0dD/6BKHP15B5bxce6aDi+E4kblPtru8amIBQzu0Di3qQ==}
 
@@ -12287,12 +12325,23 @@ snapshots:
       eslint: 10.6.0(jiti@2.7.0)(supports-color@10.2.2)
       oxlint: 1.87.0(oxlint-tsgolint@7.0.2003)(vite-plus@1.1.0)
 
+  '@emnapi/core@1.11.0':
+    dependencies:
+      '@emnapi/wasi-threads': 1.2.2
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/core@1.11.2':
     dependencies:
       '@emnapi/wasi-threads': 1.2.2
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/runtime@1.11.0':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/runtime@1.11.2':
     dependencies:
       tslib: 2.8.1
@@ -13133,6 +13182,13 @@ snapshots:
       '@napi-rs/canvas-win32-arm64-msvc': 1.0.6
       '@napi-rs/canvas-win32-x64-msvc': 1.0.6
 
+  '@napi-rs/wasm-runtime@1.2.2(@emnapi/core@1.11.0)(@emnapi/runtime@1.11.0)':
+    dependencies:
+      '@emnapi/core': 1.11.0
+      '@emnapi/runtime': 1.11.0
+      '@tybys/wasm-util': 0.10.3
+    optional: true
+
   '@napi-rs/wasm-runtime@1.2.2(@emnapi/core@1.11.2)(@emnapi/runtime@1.11.2)':
     dependencies:
       '@emnapi/core': 1.11.2
@@ -13299,7 +13355,7 @@ snapshots:
     dependencies:
       '@nuxt/kit': 4.5.2(magic-string@0.30.21)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(unplugin@3.3.0)
       execa: 8.0.1
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
     transitivePeerDependencies:
       - magic-string
       - magicast
@@ -13335,7 +13391,7 @@ snapshots:
     dependencies:
       '@nuxt/kit': 4.5.2(magic-string@1.4.3)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(unplugin@3.3.0)
       tinyexec: 1.3.0
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
     transitivePeerDependencies:
       - magic-string
       - magicast
@@ -13721,7 +13777,7 @@ snapshots:
       mocked-exports: 0.1.1
       nitropack: 2.13.4(@upstash/redis@1.38.2)(@voidzero-dev/vite-plus-core@1.1.0)(better-sqlite3@13.0.3)(encoding@0.1.13)(oxc-parser@0.144.0)(rolldown@1.2.4)(srvx@0.11.22)(supports-color@10.2.2)(webpack@5.108.4)
       nostics: 1.2.0
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nypm: 0.6.9
       ohash: 2.0.12
       pathe: 2.0.3
@@ -14038,7 +14094,7 @@ snapshots:
       - vue
       - webpack
 
-  '@nuxt/vite-builder@4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)':
+  '@nuxt/vite-builder@4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)':
     dependencies:
       '@nuxt/kit': 4.5.2(magic-string@1.1.0)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(unplugin@3.3.0)
       '@vitejs/plugin-vue': 6.0.8(@voidzero-dev/vite-plus-core@1.1.0)(vue@3.5.42)
@@ -14056,7 +14112,7 @@ snapshots:
       knitwork: 1.3.0
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nypm: 0.6.9
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -14067,8 +14123,8 @@ snapshots:
       ufo: 1.6.4
       unenv: 2.0.0-rc.24
       unplugin: 3.3.0(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rolldown@1.2.4)(rollup@4.62.2)(webpack@5.108.4)
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
-      vite-node: 6.0.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite-node: 6.0.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
       vite-plugin-checker: 0.14.5(@voidzero-dev/vite-plus-core@1.1.0)(eslint@10.6.0)(optionator@0.9.4)(oxlint@1.87.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       vue-bundle-renderer: 2.3.1
@@ -14239,7 +14295,7 @@ snapshots:
       zod: 4.6.5
     optionalDependencies:
       '@vue/compiler-sfc': 3.5.42
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
     transitivePeerDependencies:
       - '@cfworker/json-schema'
@@ -14453,54 +14509,109 @@ snapshots:
 
   '@oxc-project/types@0.153.0': {}
 
+  '@oxc-resolver/binding-android-arm-eabi@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-android-arm-eabi@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-android-arm64@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-android-arm64@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-darwin-arm64@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-darwin-arm64@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-darwin-x64@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-darwin-x64@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-freebsd-x64@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-freebsd-x64@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-arm-gnueabihf@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-arm-gnueabihf@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-arm-musleabihf@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-arm-musleabihf@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-arm64-gnu@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-arm64-gnu@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-arm64-musl@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-arm64-musl@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-ppc64-gnu@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-ppc64-gnu@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-riscv64-gnu@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-riscv64-gnu@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-riscv64-musl@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-riscv64-musl@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-s390x-gnu@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-s390x-gnu@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-x64-gnu@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-x64-gnu@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-linux-x64-musl@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-linux-x64-musl@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-openharmony-arm64@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-openharmony-arm64@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-wasm32-wasi@11.21.2':
+    dependencies:
+      '@emnapi/core': 1.11.0
+      '@emnapi/runtime': 1.11.0
+      '@napi-rs/wasm-runtime': 1.2.2(@emnapi/core@1.11.0)(@emnapi/runtime@1.11.0)
+    optional: true
+
   '@oxc-resolver/binding-wasm32-wasi@11.24.2':
     dependencies:
       '@emnapi/core': 1.11.2
@@ -14508,9 +14619,15 @@ snapshots:
       '@napi-rs/wasm-runtime': 1.2.2(@emnapi/core@1.11.2)(@emnapi/runtime@1.11.2)
     optional: true
 
+  '@oxc-resolver/binding-win32-arm64-msvc@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-win32-arm64-msvc@11.24.2':
     optional: true
 
+  '@oxc-resolver/binding-win32-x64-msvc@11.21.2':
+    optional: true
+
   '@oxc-resolver/binding-win32-x64-msvc@11.24.2':
     optional: true
 
@@ -15105,22 +15222,21 @@ snapshots:
 
   '@standard-schema/spec@1.1.0': {}
 
-  '@storybook-vue/nuxt@https://pkg.pr.new/@storybook-vue/nuxt@1021(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(storybook@10.5.5)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(unplugin@3.3.0)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)':
+  '@storybook-vue/nuxt@10.0.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(storybook@10.6.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(unplugin@3.3.0)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)':
     dependencies:
       '@nuxt/kit': 4.5.2(magic-string@1.1.0)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(unplugin@3.3.0)
       '@nuxt/schema': 4.5.2
-      '@nuxt/vite-builder': 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
+      '@nuxt/vite-builder': 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.2)
-      '@storybook/builder-vite': 10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)
-      '@storybook/vue3': 10.3.4(storybook@10.5.5)(vue@3.5.42)
-      '@storybook/vue3-vite': 10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(vue@3.5.42)(webpack@5.108.4)
+      '@storybook/builder-vite': 10.6.2(@voidzero-dev/vite-plus-core@1.1.0)(storybook@10.6.2)
+      '@storybook/vue3': 10.6.2(storybook@10.6.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue@3.5.42)
+      '@storybook/vue3-vite': 10.6.2(@voidzero-dev/vite-plus-core@1.1.0)(storybook@10.6.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue@3.5.42)
       json-stable-stringify: 1.3.0
       mlly: 1.8.2
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       ofetch: 1.5.1
       pathe: 2.0.3
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
-      unctx: 2.5.0
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       vue-router: 5.2.0(@voidzero-dev/vite-plus-core@1.1.0)(@vue/compiler-sfc@3.5.42)(esbuild@0.28.1)(rolldown@1.2.4)(rollup@4.62.2)(vue@3.5.42)(webpack@5.108.4)
@@ -15170,66 +15286,37 @@ snapshots:
       - webpack
       - yaml
 
-  '@storybook/addon-a11y@10.5.5(storybook@10.5.5)':
+  '@storybook/addon-a11y@10.6.2(storybook@10.6.2)':
     dependencies:
       '@storybook/global': 5.0.0
       axe-core: 4.13.0
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
 
-  '@storybook/addon-docs@10.5.5(@types/react@19.2.17)(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)':
+  '@storybook/addon-docs@10.6.2(@types/react@19.2.17)(storybook@10.6.2)':
     dependencies:
       '@mdx-js/react': 3.1.1(@types/react@19.2.17)(react@19.2.8)
-      '@storybook/csf-plugin': 10.5.5(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)
       '@storybook/icons': 2.1.0(react@19.2.8)
-      '@storybook/react-dom-shim': 10.5.5(@types/react@19.2.17)(react-dom@19.2.8)(react@19.2.8)(storybook@10.5.5)
+      '@storybook/react-dom-shim': 10.6.2(@types/react@19.2.17)(react-dom@19.2.8)(react@19.2.8)(storybook@10.6.2)
       react: 19.2.8
       react-dom: 19.2.8(react@19.2.8)
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       ts-dedent: 2.3.0
+      unplugin: 2.3.11
     optionalDependencies:
       '@types/react': 19.2.17
     transitivePeerDependencies:
       - '@types/react-dom'
-      - esbuild
-      - rollup
-      - vite
-      - webpack
 
-  '@storybook/addon-themes@10.5.5(storybook@10.5.5)':
+  '@storybook/addon-themes@10.6.2(storybook@10.6.2)':
     dependencies:
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       ts-dedent: 2.3.0
 
-  '@storybook/builder-vite@10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)':
+  '@storybook/builder-vite@10.6.2(@voidzero-dev/vite-plus-core@1.1.0)(storybook@10.6.2)':
     dependencies:
-      '@storybook/csf-plugin': 10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       ts-dedent: 2.3.0
       vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
-    transitivePeerDependencies:
-      - esbuild
-      - rollup
-      - webpack
-
-  '@storybook/csf-plugin@10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)':
-    dependencies:
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
-      unplugin: 2.3.11
-    optionalDependencies:
-      esbuild: 0.28.1
-      rollup: 4.62.2
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
-      webpack: 5.108.4(cssnano@8.0.2)(csso@5.0.5)(esbuild@0.28.1)(lightningcss@1.33.0)(postcss@8.5.25)
-
-  '@storybook/csf-plugin@10.5.5(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)':
-    dependencies:
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
-      unplugin: 2.3.11
-    optionalDependencies:
-      esbuild: 0.28.1
-      rollup: 4.62.2
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
-      webpack: 5.108.4(cssnano@8.0.2)(csso@5.0.5)(esbuild@0.28.1)(lightningcss@1.33.0)(postcss@8.5.25)
 
   '@storybook/global@5.0.0': {}
 
@@ -15237,37 +15324,39 @@ snapshots:
     dependencies:
       react: 19.2.8
 
-  '@storybook/react-dom-shim@10.5.5(@types/react@19.2.17)(react-dom@19.2.8)(react@19.2.8)(storybook@10.5.5)':
+  '@storybook/react-dom-shim@10.6.2(@types/react@19.2.17)(react-dom@19.2.8)(react@19.2.8)(storybook@10.6.2)':
     dependencies:
       react: 19.2.8
       react-dom: 19.2.8(react@19.2.8)
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
     optionalDependencies:
       '@types/react': 19.2.17
 
-  '@storybook/vue3-vite@10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(vue@3.5.42)(webpack@5.108.4)':
+  '@storybook/vue3-vite@10.6.2(@voidzero-dev/vite-plus-core@1.1.0)(storybook@10.6.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue@3.5.42)':
     dependencies:
-      '@storybook/builder-vite': 10.3.4(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(rollup@4.62.2)(storybook@10.5.5)(webpack@5.108.4)
-      '@storybook/vue3': 10.3.4(storybook@10.5.5)(vue@3.5.42)
-      magic-string: 0.30.21
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
-      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
+      '@storybook/builder-vite': 10.6.2(@voidzero-dev/vite-plus-core@1.1.0)(storybook@10.6.2)
+      '@storybook/vue3': 10.6.2(storybook@10.6.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue@3.5.42)
+      magic-string: 1.4.3
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
       vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
-      vue-component-meta: 2.2.12(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
-      vue-docgen-api: 4.79.2(vue@3.5.42)
+    optionalDependencies:
+      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
     transitivePeerDependencies:
-      - esbuild
-      - rollup
       - vue
-      - webpack
 
-  '@storybook/vue3@10.3.4(storybook@10.5.5)(vue@3.5.42)':
+  '@storybook/vue3@10.6.2(storybook@10.6.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue@3.5.42)':
     dependencies:
       '@storybook/global': 5.0.0
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
-      type-fest: 2.19.0
+      '@vue/compiler-dom': 3.5.42
+      '@vue/language-core': 3.3.10
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      type-fest: 5.8.0
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      vue-component-meta: 3.3.13(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       vue-component-type-helpers: 3.3.12
+      vue-docgen-api: 4.79.2(vue@3.5.42)
+    optionalDependencies:
+      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
 
   '@swc/helpers@0.5.23':
     dependencies:
@@ -15347,7 +15436,7 @@ snapshots:
       '@tailwindcss/node': 4.3.2
       '@tailwindcss/oxide': 4.3.2
       tailwindcss: 4.3.2
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
 
   '@takumi-rs/core-darwin-arm64@1.8.7':
     optional: true
@@ -15482,10 +15571,6 @@ snapshots:
       picocolors: 1.1.1
       redent: 3.0.0
 
-  '@testing-library/user-event@14.6.1(@testing-library/dom@10.4.1)':
-    dependencies:
-      '@testing-library/dom': 10.4.1
-
   '@testing-library/user-event@14.6.7(@testing-library/dom@10.4.1)':
     dependencies:
       '@testing-library/dom': 10.4.1
@@ -16144,7 +16229,7 @@ snapshots:
 
   '@vercel/speed-insights@2.0.0(nuxt@4.5.2)(react@19.2.8)(vue-router@5.2.0)(vue@3.5.42)':
     optionalDependencies:
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       react: 19.2.8
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       vue-router: 5.2.0(@voidzero-dev/vite-plus-core@1.1.0)(@vue/compiler-sfc@3.5.42)(esbuild@0.28.1)(rolldown@1.2.4)(rollup@4.62.2)(vue@3.5.42)(webpack@5.108.4)
@@ -16362,6 +16447,34 @@ snapshots:
       vue-tsc: 3.3.10(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       yaml: 2.9.1
 
+  '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)':
+    dependencies:
+      '@oxc-project/runtime': 0.153.0
+      '@oxc-project/types': 0.153.0
+      lightningcss: 1.33.0
+      postcss: 8.5.25
+      yuku-codegen: 0.9.5
+      yuku-parser: 0.9.5
+    optionalDependencies:
+      '@types/node': 24.13.3
+      '@voidzero-dev/vite-plus-darwin-arm64': 1.1.0
+      '@voidzero-dev/vite-plus-darwin-x64': 1.1.0
+      '@voidzero-dev/vite-plus-linux-arm64-gnu': 1.1.0
+      '@voidzero-dev/vite-plus-linux-arm64-musl': 1.1.0
+      '@voidzero-dev/vite-plus-linux-x64-gnu': 1.1.0
+      '@voidzero-dev/vite-plus-linux-x64-musl': 1.1.0
+      '@voidzero-dev/vite-plus-win32-arm64-msvc': 1.1.0
+      '@voidzero-dev/vite-plus-win32-x64-msvc': 1.1.0
+      '@volar/typescript': 2.4.28(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      '@vue/language-core': 3.3.13
+      esbuild: 0.28.1
+      fsevents: 2.3.3
+      jiti: 2.7.0
+      terser: 5.48.0
+      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
+      vue-tsc: 3.3.10(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      yaml: 2.9.1
+
   '@voidzero-dev/vite-plus-darwin-arm64@1.1.0':
     optional: true
 
@@ -16386,26 +16499,12 @@ snapshots:
   '@voidzero-dev/vite-plus-win32-x64-msvc@1.1.0':
     optional: true
 
-  '@volar/language-core@2.4.15':
-    dependencies:
-      '@volar/source-map': 2.4.15
-
   '@volar/language-core@2.4.28':
     dependencies:
       '@volar/source-map': 2.4.28
 
-  '@volar/source-map@2.4.15': {}
-
   '@volar/source-map@2.4.28': {}
 
-  '@volar/typescript@2.4.15(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)':
-    dependencies:
-      '@volar/language-core': 2.4.15
-      path-browserify: 1.0.1
-      vscode-uri: 3.1.0
-    optionalDependencies:
-      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
-
   '@volar/typescript@2.4.28(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)':
     dependencies:
       '@volar/language-core': 2.4.28
@@ -16483,11 +16582,6 @@ snapshots:
       '@vue/compiler-dom': 3.5.42
       '@vue/shared': 3.5.42
 
-  '@vue/compiler-vue2@2.7.16':
-    dependencies:
-      de-indent: 1.0.2
-      he: 1.2.0
-
   '@vue/devtools-api@6.6.4': {}
 
   '@vue/devtools-api@8.1.5':
@@ -16509,20 +16603,17 @@ snapshots:
 
   '@vue/devtools-shared@8.2.1': {}
 
-  '@vue/language-core@2.2.12(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)':
+  '@vue/language-core@3.3.10':
     dependencies:
-      '@volar/language-core': 2.4.15
+      '@volar/language-core': 2.4.28
       '@vue/compiler-dom': 3.5.42
-      '@vue/compiler-vue2': 2.7.16
       '@vue/shared': 3.5.42
-      alien-signals: 1.0.13
-      minimatch: 9.0.9
+      alien-signals: 3.2.1
       muggle-string: 0.4.1
       path-browserify: 1.0.1
-    optionalDependencies:
-      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
+      picomatch: 4.0.7
 
-  '@vue/language-core@3.3.10':
+  '@vue/language-core@3.3.13':
     dependencies:
       '@volar/language-core': 2.4.28
       '@vue/compiler-dom': 3.5.42
@@ -16611,7 +16702,7 @@ snapshots:
       '@vueuse/core': 14.4.0(vue@3.5.42)
       '@vueuse/metadata': 14.4.0
       local-pkg: 1.2.1
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
     transitivePeerDependencies:
       - magic-string
@@ -16876,8 +16967,6 @@ snapshots:
       '@algolia/requester-fetch': 5.56.0
       '@algolia/requester-node-http': 5.56.0
 
-  alien-signals@1.0.13: {}
-
   alien-signals@3.2.1: {}
 
   ansi-regex@5.0.1: {}
@@ -17508,8 +17597,6 @@ snapshots:
     optionalDependencies:
       better-sqlite3: 13.0.3
 
-  de-indent@1.0.2: {}
-
   debug@4.4.3(supports-color@10.2.2):
     dependencies:
       ms: 2.1.3
@@ -17642,7 +17729,7 @@ snapshots:
       exsolve: 1.1.1
       git-url-parse: 16.1.0
       motion-v: 2.3.0(@vueuse/core@14.4.0)(react-dom@19.2.8)(react@19.2.8)(vue@3.5.42)
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nuxt-llms: 0.2.0(magic-string@1.4.3)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(unplugin@3.3.0)
       nuxt-og-image: 6.7.5(@nuxt/schema@4.5.2)(@oxc-project/types@0.153.0)(@takumi-rs/core@1.8.7)(@takumi-rs/wasm@2.9.2)(@unhead/vue@3.3.1)(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(fontless@0.2.1)(nitropack@2.13.4)(nuxt@4.5.2)(playwright-core@1.62.1)(rolldown@1.2.4)(rollup@4.62.2)(sharp@0.35.3)(supports-color@10.2.2)(tailwindcss@4.3.3)(unifont@0.7.4)(unstorage@1.17.5)(vue@3.5.42)(webpack@5.108.4)(zod@4.6.5)
       pathe: 2.0.3
@@ -18861,8 +18948,6 @@ snapshots:
       property-information: 7.2.0
       space-separated-tokens: 2.0.2
 
-  he@1.2.0: {}
-
   headers-polyfill@5.0.1:
     dependencies:
       '@types/set-cookie-parser': 2.4.10
@@ -20090,10 +20175,10 @@ snapshots:
 
   ms@2.1.3: {}
 
-  msw-storybook-addon@3.0.0(msw@3.0.2)(storybook@10.5.5):
+  msw-storybook-addon@3.0.0(msw@3.0.2)(storybook@10.6.2):
     dependencies:
       msw: 3.0.2(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(graphql@16.14.2)(supports-color@10.2.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
 
   msw@3.0.2(@types/node@24.13.3)(@voidzero-dev/vite-plus-core@1.1.0)(graphql@16.14.2)(supports-color@10.2.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2):
     dependencies:
@@ -20527,7 +20612,7 @@ snapshots:
       - vue
       - zod
 
-  nuxt@4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1):
+  nuxt@4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1):
     dependencies:
       '@dxup/nuxt': 0.5.6(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(magicast@0.5.4)(oxc-parser@0.144.0)(rolldown@1.2.4)(rollup@4.62.2)(webpack@5.108.4)
       '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.2)(cac@6.7.14)(magicast@0.5.4)(supports-color@10.2.2)
@@ -20536,7 +20621,7 @@ snapshots:
       '@nuxt/nitro-server': 4.5.2(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@rollup/plugin-babel@6.1.0)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(better-sqlite3@13.0.3)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1)(lightningcss@1.33.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(oxc-parser@0.144.0)(rolldown@1.2.4)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(unplugin@3.3.0)(webpack@5.108.4)
       '@nuxt/schema': 4.5.2
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@4.5.2)
-      '@nuxt/vite-builder': 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
+      '@nuxt/vite-builder': 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(eslint@10.6.0)(magic-string@1.1.0)(magicast@0.5.4)(nuxt@4.5.2)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(vue@3.5.42)(webpack@5.108.4)(yaml@2.9.1)
       '@unhead/vue': 3.3.1(@oxc-project/types@0.153.0)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(esbuild@0.28.1)(lightningcss@1.33.0)(oxc-parser@0.144.0)(rolldown@1.2.4)(rollup@4.62.2)(vue@3.5.42)(webpack@5.108.4)
       '@vue/shared': 3.5.42
       chokidar: 5.0.0
@@ -20685,7 +20770,7 @@ snapshots:
       birpc: 4.0.0
       consola: 3.4.2
       defu: 6.1.7
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nypm: 0.6.9
       ofetch: 1.5.1
       pathe: 2.0.3
@@ -20715,7 +20800,7 @@ snapshots:
       birpc: 4.0.0
       consola: 3.4.2
       defu: 6.1.7
-      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.10)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
+      nuxt: 4.5.2(@babel/plugin-syntax-jsx@7.29.7)(@babel/plugin-syntax-typescript@7.29.7)(@oxc-project/types@0.153.0)(@parcel/watcher@2.5.6)(@rollup/plugin-babel@6.1.0)(@types/node@24.13.3)(@upstash/redis@1.38.2)(@vitejs/devtools-kit@0.4.10)(@voidzero-dev/vite-plus-core@1.1.0)(@volar/typescript@2.4.28)(@vue/compiler-sfc@3.5.42)(@vue/language-core@3.3.13)(better-sqlite3@13.0.3)(cac@6.7.14)(db0@0.3.4)(encoding@0.1.13)(esbuild@0.28.1)(eslint@10.6.0)(ioredis@5.11.1)(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.144.0)(oxlint@1.87.0)(rolldown@1.2.4)(rollup-plugin-visualizer@7.0.1)(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(webpack@5.108.4)(yaml@2.9.1)
       nypm: 0.6.9
       ofetch: 1.5.1
       pathe: 2.0.3
@@ -20856,6 +20941,28 @@ snapshots:
       '@oxc-parser/binding-win32-ia32-msvc': 0.144.0
       '@oxc-parser/binding-win32-x64-msvc': 0.144.0
 
+  oxc-resolver@11.21.2:
+    optionalDependencies:
+      '@oxc-resolver/binding-android-arm-eabi': 11.21.2
+      '@oxc-resolver/binding-android-arm64': 11.21.2
+      '@oxc-resolver/binding-darwin-arm64': 11.21.2
+      '@oxc-resolver/binding-darwin-x64': 11.21.2
+      '@oxc-resolver/binding-freebsd-x64': 11.21.2
+      '@oxc-resolver/binding-linux-arm-gnueabihf': 11.21.2
+      '@oxc-resolver/binding-linux-arm-musleabihf': 11.21.2
+      '@oxc-resolver/binding-linux-arm64-gnu': 11.21.2
+      '@oxc-resolver/binding-linux-arm64-musl': 11.21.2
+      '@oxc-resolver/binding-linux-ppc64-gnu': 11.21.2
+      '@oxc-resolver/binding-linux-riscv64-gnu': 11.21.2
+      '@oxc-resolver/binding-linux-riscv64-musl': 11.21.2
+      '@oxc-resolver/binding-linux-s390x-gnu': 11.21.2
+      '@oxc-resolver/binding-linux-x64-gnu': 11.21.2
+      '@oxc-resolver/binding-linux-x64-musl': 11.21.2
+      '@oxc-resolver/binding-openharmony-arm64': 11.21.2
+      '@oxc-resolver/binding-wasm32-wasi': 11.21.2
+      '@oxc-resolver/binding-win32-arm64-msvc': 11.21.2
+      '@oxc-resolver/binding-win32-x64-msvc': 11.21.2
+
   oxc-resolver@11.24.2:
     optionalDependencies:
       '@oxc-resolver/binding-android-arm-eabi': 11.24.2
@@ -20935,7 +21042,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.72.0
       '@oxfmt/binding-win32-ia32-msvc': 0.72.0
       '@oxfmt/binding-win32-x64-msvc': 0.72.0
-      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
+      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
 
   oxlint-tsgolint@7.0.2003:
     optionalDependencies:
@@ -20968,7 +21075,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.87.0
       '@oxlint/binding-win32-x64-msvc': 1.87.0
       oxlint-tsgolint: 7.0.2003
-      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
+      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
 
   p-all@5.0.1:
     dependencies:
@@ -22192,20 +22299,20 @@ snapshots:
       es-errors: 1.3.0
       internal-slot: 1.1.0
 
-  storybook-i18n@10.1.1(react@19.2.8)(storybook@10.5.5):
+  storybook-i18n@10.1.1(react@19.2.8)(storybook@10.6.2):
     dependencies:
       '@storybook/icons': 2.1.0(react@19.2.8)
-      storybook: 10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
+      storybook: 10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0)
     transitivePeerDependencies:
       - react
 
-  storybook@10.5.5(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0):
+  storybook@10.6.2(@types/react@19.2.17)(prettier@3.9.6)(react@19.2.8)(vite-plus@1.1.0):
     dependencies:
       '@storybook/global': 5.0.0
       '@storybook/icons': 2.1.0(react@19.2.8)
       '@testing-library/dom': 10.4.1
       '@testing-library/jest-dom': 6.9.1
-      '@testing-library/user-event': 14.6.1(@testing-library/dom@10.4.1)
+      '@testing-library/user-event': 14.6.7(@testing-library/dom@10.4.1)
       '@vitest/expect': 3.2.4
       '@vitest/spy': 3.2.4
       '@webcontainer/env': 1.1.1
@@ -22213,15 +22320,15 @@ snapshots:
       jsonc-parser: 3.3.1
       open: 10.2.0
       oxc-parser: 0.144.0
-      oxc-resolver: 11.24.2
+      oxc-resolver: 11.21.2
       recast: 0.23.19
       semver: 7.8.5
       use-sync-external-store: 1.6.0(react@19.2.8)
-      ws: 8.21.1
+      ws: 8.22.0
     optionalDependencies:
       '@types/react': 19.2.17
       prettier: 3.9.6
-      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
+      vite-plus: 1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)
     transitivePeerDependencies:
       - bufferutil
       - react
@@ -22536,8 +22643,6 @@ snapshots:
 
   type-fest@0.16.0: {}
 
-  type-fest@2.19.0: {}
-
   type-fest@5.8.0:
     dependencies:
       tagged-tag: 1.0.0
@@ -23034,13 +23139,13 @@ snapshots:
     dependencies:
       vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
 
-  vite-node@6.0.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1):
+  vite-node@6.0.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1):
     dependencies:
       cac: 7.0.0
       es-module-lexer: 2.3.2
       obug: 2.1.4
       pathe: 2.0.3
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
     transitivePeerDependencies:
       - '@arethetypeswrong/core'
       - '@types/node'
@@ -23125,7 +23230,7 @@ snapshots:
   vite-plugin-singlefile@2.3.3(@voidzero-dev/vite-plus-core@1.1.0)(rollup@4.62.2):
     dependencies:
       micromatch: 4.0.8
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
     optionalDependencies:
       rollup: 4.62.2
 
@@ -23139,7 +23244,7 @@ snapshots:
       vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
 
-  vite-plus@1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1):
+  vite-plus@1.1.0(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(msw@3.0.2)(playwright@1.62.1)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1):
     dependencies:
       '@oxc-project/types': 0.153.0
       '@oxlint/plugins': 1.79.0
@@ -23153,7 +23258,7 @@ snapshots:
       oxfmt: 0.72.0(vite-plus@1.1.0)
       oxlint: 1.87.0(oxlint-tsgolint@7.0.2003)(vite-plus@1.1.0)
       oxlint-tsgolint: 7.0.2003
-      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.10)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
+      vite: '@voidzero-dev/vite-plus-core@1.1.0(@types/node@24.13.3)(@volar/typescript@2.4.28)(@vue/language-core@3.3.13)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)(vue-tsc@3.3.10)(yaml@2.9.1)'
       vitest: 5.0.3(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(@vitest/browser-playwright@5.0.3)(@vitest/browser-preview@5.0.3)(@vitest/coverage-v8@5.0.3)(@vitest/ui@5.0.3)(@voidzero-dev/vite-plus-core@1.1.0)(msw@3.0.2)
     optionalDependencies:
       '@vitest/browser-playwright': 5.0.3(@voidzero-dev/vite-plus-core@1.1.0)(msw@3.0.2)(playwright@1.62.1)(vitest@5.0.3)
@@ -23261,12 +23366,11 @@ snapshots:
     dependencies:
       ufo: 1.6.4
 
-  vue-component-meta@2.2.12(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2):
+  vue-component-meta@3.3.13(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2):
     dependencies:
-      '@volar/typescript': 2.4.15(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
-      '@vue/language-core': 2.2.12(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      '@volar/typescript': 2.4.28(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      '@vue/language-core': 3.3.13
       path-browserify: 1.0.1
-      vue-component-type-helpers: 2.2.12
     optionalDependencies:
       typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
 
@@ -23278,8 +23382,6 @@ snapshots:
     optionalDependencies:
       typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
 
-  vue-component-type-helpers@2.2.12: {}
-
   vue-component-type-helpers@3.3.12: {}
 
   vue-data-ui@3.26.1(vue@3.5.42):
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 1396802deb..db7fd4da84 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -20,12 +20,12 @@ catalogs:
     'msw': '^3.0.0'
 
   storybook:
-    '@storybook-vue/nuxt': 'https://pkg.pr.new/@storybook-vue/nuxt@1021'
-    '@storybook/addon-a11y': '^10.3.5'
-    '@storybook/addon-docs': '^10.3.5'
-    '@storybook/addon-themes': '^10.3.5'
+    '@storybook-vue/nuxt': '^10.0.0'
+    '@storybook/addon-a11y': '^10.6.0'
+    '@storybook/addon-docs': '^10.6.0'
+    '@storybook/addon-themes': '^10.6.0'
     'msw-storybook-addon': '^3.0.0'
-    'storybook': '^10.3.1'
+    'storybook': '^10.6.0'
     'storybook-i18n': '^10.1.1'
 
   vite-plus:

From 4cf08404f2d958b0b52c4ea3e7d9ef6920a33898 Mon Sep 17 00:00:00 2001
From: Daniel Roe <daniel@roe.dev>
Date: Sun, 18 Oct 2026 02:09:50 +0000
Subject: [PATCH 22/26] fix: clarify trust downgrade for trusted pub w/o
 provenance (#3285)

Co-authored-by: Philippe Serhal <philippe.serhal@gmail.com>
---
 .../Package/SecurityDowngradeAlert.vue        | 29 +++++++++++++++++-
 app/pages/package/[[org]]/[name].vue          |  2 +-
 app/utils/publish-security.ts                 |  1 +
 i18n/locales/en.json                          |  1 +
 i18n/schema.json                              |  3 ++
 shared/types/npm-registry.ts                  |  2 ++
 test/nuxt/a11y.spec.ts                        |  1 +
 .../composables/use-package-transform.spec.ts |  2 ++
 test/unit/app/utils/publish-security.spec.ts  | 30 +++++++++++++++++++
 9 files changed, 69 insertions(+), 2 deletions(-)

diff --git a/app/components/Package/SecurityDowngradeAlert.vue b/app/components/Package/SecurityDowngradeAlert.vue
index 4ca0e8cf4b..7bd2ddf91a 100644
--- a/app/components/Package/SecurityDowngradeAlert.vue
+++ b/app/components/Package/SecurityDowngradeAlert.vue
@@ -19,7 +19,34 @@ defineProps<{
     </h3>
     <p class="mt-2 mb-0 text-sm">
       <i18n-t
-        v-if="
+        v-if="downgrade.downgradedTrustedPublisher"
+        keypath="package.security_downgrade.description_to_trustedPublisher_without_provenance"
+        tag="span"
+        scope="global"
+      >
+        <template #trustedPublishing>
+          <a
+            href="https://docs.npmjs.com/trusted-publishers"
+            target="_blank"
+            rel="noopener noreferrer"
+            class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+            >{{ $t('package.security_downgrade.trusted_publishing_link_text')
+            }}<span class="i-lucide:external-link w-3 h-3" aria-hidden="true"
+          /></a>
+        </template>
+        <template #provenance>
+          <a
+            href="https://docs.npmjs.com/generating-provenance-statements"
+            target="_blank"
+            rel="noopener noreferrer"
+            class="inline-flex items-center gap-1 rounded-sm underline underline-offset-4 decoration-amber-600/60 dark:decoration-amber-400/50 hover:decoration-fg focus-visible:decoration-fg focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/70 transition-colors"
+            >{{ $t('package.security_downgrade.provenance_link_text')
+            }}<span class="i-lucide:external-link w-3 h-3" aria-hidden="true"
+          /></a>
+        </template>
+      </i18n-t>
+      <i18n-t
+        v-else-if="
           downgrade.downgradedTrustLevel === 'none' && downgrade.trustedTrustLevel === 'provenance'
         "
         keypath="package.security_downgrade.description_to_none_provenance"
diff --git a/app/pages/package/[[org]]/[name].vue b/app/pages/package/[[org]]/[name].vue
index 5e9d496f1b..30c93473cc 100644
--- a/app/pages/package/[[org]]/[name].vue
+++ b/app/pages/package/[[org]]/[name].vue
@@ -330,7 +330,7 @@ const installVersionOverride = computed(
 const downgradeFallbackInstallText = computed(() => {
   const d = publishSecurityDowngrade.value
   if (!d?.trustedVersion) return null
-  if (d.trustedTrustLevel === 'provenance')
+  if (d.trustedTrustLevel === 'provenance' || d.downgradedTrustedPublisher)
     return $t('package.security_downgrade.fallback_install_provenance', {
       version: d.trustedVersion,
     })
diff --git a/app/utils/publish-security.ts b/app/utils/publish-security.ts
index 137465b0b5..c87c49ebe7 100644
--- a/app/utils/publish-security.ts
+++ b/app/utils/publish-security.ts
@@ -95,6 +95,7 @@ export function detectSecurityDowngradeForVersion(
     downgradedVersion: current.version,
     downgradedPublishedAt: current.time,
     downgradedTrustLevel: current.trustLevelName,
+    downgradedTrustedPublisher: current.trustStatus?.trustedPublisher ?? false,
     trustedVersion: recommendation?.version,
     trustedPublishedAt: recommendation?.time,
     trustedTrustLevel: strongestOlder.trustLevelName,
diff --git a/i18n/locales/en.json b/i18n/locales/en.json
index 7e046ab8ae..b66dcdaaa6 100644
--- a/i18n/locales/en.json
+++ b/i18n/locales/en.json
@@ -620,6 +620,7 @@
       "description_to_none_provenance": "This version was published without {provenance}.",
       "description_to_none_trustedPublisher": "This version was published without {trustedPublishing}.",
       "description_to_provenance_trustedPublisher": "This version uses {provenance} but not {trustedPublishing}.",
+      "description_to_trustedPublisher_without_provenance": "This version uses {trustedPublishing} but was published without {provenance}.",
       "fallback_install_provenance": "Install commands are pinned to {version}, the last version with provenance.",
       "fallback_install_trustedPublisher": "Install commands are pinned to {version}, the last version with trusted publishing.",
       "provenance_link_text": "provenance",
diff --git a/i18n/schema.json b/i18n/schema.json
index 29920ebc18..86c5ba13b2 100644
--- a/i18n/schema.json
+++ b/i18n/schema.json
@@ -1864,6 +1864,9 @@
             "description_to_provenance_trustedPublisher": {
               "type": "string"
             },
+            "description_to_trustedPublisher_without_provenance": {
+              "type": "string"
+            },
             "fallback_install_provenance": {
               "type": "string"
             },
diff --git a/shared/types/npm-registry.ts b/shared/types/npm-registry.ts
index d59f95e135..8c09106968 100644
--- a/shared/types/npm-registry.ts
+++ b/shared/types/npm-registry.ts
@@ -105,6 +105,8 @@ export interface PublishSecurityDowngrade {
   downgradedVersion: string
   downgradedPublishedAt?: string
   downgradedTrustLevel: TrustLevelName
+  /** Whether the downgraded version was still published via trusted publishing (OIDC) */
+  downgradedTrustedPublisher: boolean
   /** Recommended trusted version within the same major, if one exists */
   trustedVersion?: string
   trustedPublishedAt?: string
diff --git a/test/nuxt/a11y.spec.ts b/test/nuxt/a11y.spec.ts
index c074f6aaa1..13f9b0983f 100644
--- a/test/nuxt/a11y.spec.ts
+++ b/test/nuxt/a11y.spec.ts
@@ -3968,6 +3968,7 @@ describe('component accessibility audits', () => {
           downgrade: {
             downgradedVersion: '2.0.0',
             downgradedTrustLevel: 'none',
+            downgradedTrustedPublisher: true,
             trustedVersion: '1.9.0',
             trustedTrustLevel: 'provenance',
           },
diff --git a/test/nuxt/composables/use-package-transform.spec.ts b/test/nuxt/composables/use-package-transform.spec.ts
index 20e3c13ffd..ea3619cefe 100644
--- a/test/nuxt/composables/use-package-transform.spec.ts
+++ b/test/nuxt/composables/use-package-transform.spec.ts
@@ -152,6 +152,7 @@ describe('transformPackument', () => {
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
       downgradedTrustLevel: 'none',
+      downgradedTrustedPublisher: false,
       trustedVersion: '1.0.0',
       trustedPublishedAt: '2026-01-01T00:00:00.000Z',
       trustedTrustLevel: 'provenance',
@@ -180,6 +181,7 @@ describe('transformPackument', () => {
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
       downgradedTrustLevel: 'none',
+      downgradedTrustedPublisher: false,
       trustedVersion: '1.0.0',
       trustedPublishedAt: '2026-01-01T00:00:00.000Z',
       trustedTrustLevel: 'provenance',
diff --git a/test/unit/app/utils/publish-security.spec.ts b/test/unit/app/utils/publish-security.spec.ts
index 20934c024b..d5531a42c7 100644
--- a/test/unit/app/utils/publish-security.spec.ts
+++ b/test/unit/app/utils/publish-security.spec.ts
@@ -31,6 +31,7 @@ describe('detectSecurityDowngradeForVersion', () => {
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
       downgradedTrustLevel: 'none',
+      downgradedTrustedPublisher: false,
       trustedVersion: '1.0.0',
       trustedPublishedAt: '2026-01-01T00:00:00.000Z',
       trustedTrustLevel: 'provenance',
@@ -58,6 +59,35 @@ describe('detectSecurityDowngradeForVersion', () => {
       downgradedVersion: '1.0.1',
       downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
       downgradedTrustLevel: 'provenance',
+      downgradedTrustedPublisher: false,
+      trustedVersion: '1.0.0',
+      trustedPublishedAt: '2026-01-01T00:00:00.000Z',
+      trustedTrustLevel: 'trustedPublisher',
+    })
+  })
+
+  it('flags trustedPublisher without provenance and reports trusted publishing on the downgraded version', () => {
+    const result = detectSecurityDowngradeForVersion(
+      [
+        {
+          version: '1.0.0',
+          time: '2026-01-01T00:00:00.000Z',
+          trustStatus: { provenance: true, trustedPublisher: true, stagedPublish: false },
+        },
+        {
+          version: '1.0.1',
+          time: '2026-01-02T00:00:00.000Z',
+          trustStatus: { provenance: false, trustedPublisher: true, stagedPublish: false },
+        },
+      ],
+      '1.0.1',
+    )
+
+    expect(result).toEqual({
+      downgradedVersion: '1.0.1',
+      downgradedPublishedAt: '2026-01-02T00:00:00.000Z',
+      downgradedTrustLevel: 'none',
+      downgradedTrustedPublisher: true,
       trustedVersion: '1.0.0',
       trustedPublishedAt: '2026-01-01T00:00:00.000Z',
       trustedTrustLevel: 'trustedPublisher',

From d3d2d589a6290986fe51c816f44c4f6cd7c50c65 Mon Sep 17 00:00:00 2001
From: Alec Lloyd Probert <55991794+graphieros@users.noreply.github.com>
Date: Sun, 18 Oct 2026 14:36:42 +0000
Subject: [PATCH 23/26] feat: add downloads heatmap chart in stats page (#3324)

Co-authored-by: Felix Schneider <99918022+trueberryless@users.noreply.github.com>
---
 .../Package/DailyDownloadsHeatmap.vue         | 794 ++++++++++++++++++
 .../package-stats/[[org]]/[packageName].vue   |   8 +
 app/utils/charts.ts                           | 157 ++++
 i18n/locales/en.json                          |  22 +-
 i18n/locales/fr-FR.json                       |  22 +-
 i18n/schema.json                              |  60 ++
 nuxt.config.ts                                |   1 +
 package.json                                  |   2 +-
 pnpm-lock.yaml                                |  41 +-
 pnpm-workspace.yaml                           |   2 +-
 test/nuxt/a11y.spec.ts                        |  99 ++-
 test/unit/app/utils/charts.spec.ts            | 279 ++++++
 12 files changed, 1446 insertions(+), 41 deletions(-)
 create mode 100644 app/components/Package/DailyDownloadsHeatmap.vue

diff --git a/app/components/Package/DailyDownloadsHeatmap.vue b/app/components/Package/DailyDownloadsHeatmap.vue
new file mode 100644
index 0000000000..719fdac178
--- /dev/null
+++ b/app/components/Package/DailyDownloadsHeatmap.vue
@@ -0,0 +1,794 @@
+<script setup lang="ts">
+import {
+  VueUiHeatmap,
+  type VueUiHeatmapCell,
+  type VueUiHeatmapConfig,
+  type VueUiHeatmapDatapoint,
+  type VueUiHeatmapDatasetItem,
+  type VueUiHeatmapRow,
+  type VueUiHeatmapSvgSlotProps,
+} from 'vue-data-ui/vue-ui-heatmap'
+import { useTooltipPosition } from 'vue-data-ui/composables'
+import { adaptColorToBackground } from 'vue-data-ui/utils'
+import { addDays, parseIsoDate, toIsoDate } from '~/utils/date'
+import { applyBlocklistCorrection } from '~/utils/download-anomalies'
+import { downloadFileLink } from '~/utils/download'
+import { useCopyChartPng } from '~/composables/useCopyChartPng'
+import { useElementSize } from '@vueuse/core'
+import {
+  sanitise,
+  copyAltTextFromDownloadsHeatmap,
+  CHART_ANNOTATOR_SLOTS,
+  getAnnotatorIcon,
+  getAnnotatorStyle,
+} from '~/utils/charts'
+
+type DailyDataPoint = {
+  day: string
+  value: number
+  timestamp: number
+  hasAnomaly?: boolean
+}
+
+const props = defineProps<{ packageName: string }>()
+const chartRef = useTemplateRef('chartRef')
+
+const { locale, localeProperties } = useI18n()
+const isRTL = computed(() => localeProperties.value.dir === 'rtl')
+
+const colorMode = useColorMode()
+const isDarkMode = computed(() => colorMode.value === 'dark')
+const rootEl = shallowRef<HTMLElement | null>(null)
+const { width } = useElementSize(rootEl)
+const { copy, copied } = useClipboard()
+const tooltipPosition = useTooltipPosition(chartRef)
+const { copiedPng, isCopyingPng, copyChartPng } = useCopyChartPng(chartRef)
+
+onMounted(() => {
+  rootEl.value = document.documentElement
+})
+
+const { colors } = useColors(rootEl)
+
+const { fetchPackageDownloadEvolution } = useCharts()
+const { settings } = useSettings()
+const { accentColors, selectedAccentColor } = useAccentColor()
+const compactNumberFormatter = useCompactNumberFormatter()
+
+const source = shallowRef<DailyDataPoint[]>([])
+const isLoading = ref(true)
+const fetchError = shallowRef<string | null>(null)
+
+const watermarkColors = computed(() => ({
+  fg: colors.value.fg ?? OKLCH_NEUTRAL_FALLBACK,
+  bg: colors.value.bg ?? OKLCH_NEUTRAL_FALLBACK,
+  fgSubtle: colors.value.fgSubtle ?? OKLCH_NEUTRAL_FALLBACK,
+}))
+
+const WEEK_COUNT = 52
+const DAYS_PER_WEEK = 7
+const WEEK_DAYS = ['SUN', 'MON', 'TUE', 'WED', 'THU', 'FRI', 'SAT'] as const
+
+function toUtcDay(date: Date): Date {
+  return new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()))
+}
+
+function getDayKey(point: DailyDataPoint): string | null {
+  if (/^\d{4}-\d{2}-\d{2}$/.test(point.day)) return point.day
+  if (Number.isFinite(point.timestamp)) {
+    const date = new Date(point.timestamp)
+    if (Number.isFinite(date.getTime())) return toIsoDate(date)
+  }
+  return null
+}
+
+let currentRequest = 0
+
+async function loadDownloads() {
+  const request = ++currentRequest
+  isLoading.value = true
+  fetchError.value = null
+
+  try {
+    const yesterday = addDays(toUtcDay(new Date()), -1)
+    const result = await fetchPackageDownloadEvolution(props.packageName, null, {
+      granularity: 'day',
+      startDate: toIsoDate(addDays(yesterday, -(WEEK_COUNT * DAYS_PER_WEEK) + 1)),
+      endDate: toIsoDate(yesterday),
+    })
+
+    if (request === currentRequest) {
+      source.value = result as DailyDataPoint[]
+    }
+  } catch (error) {
+    if (request !== currentRequest) return
+
+    source.value = []
+    fetchError.value = error instanceof Error ? error.message : $t('package.trends.no_data')
+  } finally {
+    if (request === currentRequest) isLoading.value = false
+  }
+}
+
+onMounted(loadDownloads)
+
+// Flags known anomalies with `hasAnomaly` so they render as such, like in the trends chart
+const correctedSource = computed(() =>
+  settings.value.chartFilter.anomaliesFixed
+    ? (applyBlocklistCorrection({
+        data: source.value,
+        packageName: props.packageName,
+        granularity: 'daily',
+      }) as DailyDataPoint[])
+    : source.value,
+)
+watch(() => props.packageName, loadDownloads)
+
+const tooltipDateFormatter = computed(
+  () =>
+    new Intl.DateTimeFormat(locale.value, {
+      weekday: 'long',
+      year: 'numeric',
+      month: 'short',
+      day: 'numeric',
+      timeZone: 'UTC',
+    }),
+)
+const monthFormatter = computed(
+  () =>
+    new Intl.DateTimeFormat(locale.value, {
+      month: 'short',
+      timeZone: 'UTC',
+    }),
+)
+
+const weekdayLabels = computed(() => {
+  const formatter = new Intl.DateTimeFormat(locale.value, {
+    weekday: 'short',
+    timeZone: 'UTC',
+  })
+  const today = toUtcDay(new Date())
+  const startOffset = today.getUTCDay()
+  return WEEK_DAYS.map((_, index) => formatter.format(addDays(today, index - startOffset)))
+})
+
+const dateRangeFormatter = computed(
+  () =>
+    new Intl.DateTimeFormat(locale.value, {
+      year: 'numeric',
+      month: '2-digit',
+      day: '2-digit',
+      timeZone: 'UTC',
+    }),
+)
+
+const dateRange = computed(() => {
+  const firstWeekStart = heatmap.value.weekStarts[0]
+  const lastWeekStart = heatmap.value.weekStarts.at(-1)
+  const endOfWeek = lastWeekStart ? addDays(parseIsoDate(lastWeekStart), DAYS_PER_WEEK - 1) : null
+  const yesterday = addDays(toUtcDay(new Date()), -1)
+
+  return {
+    from: firstWeekStart ? dateRangeFormatter.value.format(parseIsoDate(firstWeekStart)) : '',
+    to: endOfWeek
+      ? dateRangeFormatter.value.format(endOfWeek > yesterday ? yesterday : endOfWeek)
+      : '',
+  }
+})
+
+const heatmap = computed(() => {
+  const valuesByDate = new Map<string, number>()
+  const anomalousDates = new Set<string>()
+  const reportedDates = new Set<string>()
+
+  for (const item of correctedSource.value) {
+    const day = getDayKey(item)
+    if (!day || !Number.isFinite(item.value)) continue
+    reportedDates.add(day)
+    valuesByDate.set(day, (valuesByDate.get(day) ?? 0) + item.value)
+    if (item.hasAnomaly) anomalousDates.add(day)
+  }
+
+  const today = toUtcDay(new Date())
+  const weekStartOffset = today.getUTCDay()
+  const currentWeekStart = addDays(today, -weekStartOffset)
+  const firstWeekStart = addDays(currentWeekStart, -(WEEK_COUNT - 1) * DAYS_PER_WEEK)
+
+  const weeks = Array.from({ length: WEEK_COUNT }, (_, index) => {
+    const start = addDays(firstWeekStart, index * DAYS_PER_WEEK)
+    return { start, end: addDays(start, DAYS_PER_WEEK - 1) }
+  })
+
+  const dataset = WEEK_DAYS.map((name, dayIndex) => ({
+    name,
+    values: weeks.map(week => valuesByDate.get(toIsoDate(addDays(week.start, dayIndex))) ?? 0),
+  }))
+
+  let previousMonth = ''
+  const xAxisValues = weeks.map(week => {
+    // A month label belongs to the week containing that month's first day.
+    const labelDate = week.start.getUTCMonth() === week.end.getUTCMonth() ? week.start : week.end
+    const month = `${labelDate.getUTCFullYear()}-${labelDate.getUTCMonth()}`
+    const label = month === previousMonth ? '' : monthFormatter.value.format(labelDate)
+    previousMonth = month
+    return label
+  })
+
+  return {
+    dataset,
+    xAxisValues,
+    weekStarts: weeks.map(week => toIsoDate(week.start)),
+    anomalousDates,
+    reportedDates,
+  }
+})
+
+const dataset = computed<VueUiHeatmapDatasetItem[]>(() => heatmap.value.dataset)
+
+function computeMinMax(value: number, maxVal: number, date: string | null) {
+  return {
+    value: compactNumberFormatter.value.format(value),
+    date: date ? dateRangeFormatter.value.format(parseIsoDate(date)) : '',
+    color: transparentizeOklch(accent.value, maxVal > 0 ? 1 - value / maxVal : 1),
+  }
+}
+
+const minMax = computed(() => {
+  let minValue = Infinity
+  let maxValue = 0
+  let minDate: string | null = null
+  let maxDate: string | null = null
+
+  const { dataset: ds, weekStarts, reportedDates, anomalousDates } = heatmap.value
+
+  for (const [dayIndex, row] of ds.entries()) {
+    for (const [weekIndex, value] of row.values.entries()) {
+      if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) continue
+
+      const weekStart = weekStarts[weekIndex]
+      if (!weekStart) continue
+
+      const key = toIsoDate(addDays(parseIsoDate(weekStart), dayIndex))
+      if (!reportedDates.has(key) || anomalousDates.has(key)) continue
+
+      if (value < minValue) {
+        minValue = value
+        minDate = key
+      }
+
+      if (value > maxValue) {
+        maxValue = value
+        maxDate = key
+      }
+    }
+  }
+
+  return {
+    min: computeMinMax(Number.isFinite(minValue) ? minValue : 0, maxValue, minDate),
+    max: computeMinMax(maxValue, maxValue, maxDate),
+  }
+})
+
+const accentColorValueById = computed<Record<string, string>>(() => {
+  const map: Record<string, string> = {}
+  for (const item of accentColors.value) {
+    map[item.id] = item.value
+  }
+  return map
+})
+
+const accent = computed(() => {
+  const id = selectedAccentColor.value
+  return id
+    ? (accentColorValueById.value[id] ?? colors.value.fgSubtle ?? OKLCH_NEUTRAL_FALLBACK)
+    : (colors.value.fgSubtle ?? OKLCH_NEUTRAL_FALLBACK)
+})
+
+const CELL_SPACING = 1
+
+const mobileBreakpointWidth = 640
+const isMobile = computed(() => width.value > 0 && width.value < mobileBreakpointWidth)
+
+function buildExportFilename(extension: 'png' | 'csv' | 'svg') {
+  return `${sanitise(props.packageName)}_${$t('package.trends.downloads_heatmap.title', dateRange.value).replaceAll(' ', '_').replaceAll('/', '-')}.${extension}`
+}
+
+const config = computed<VueUiHeatmapConfig>(() => ({
+  userOptions: {
+    useCursorPointer: true,
+    buttons: {
+      pdf: false,
+      fullscreen: false,
+      table: false,
+      tooltip: false,
+      altCopy: true,
+      annotator: !isMobile.value,
+    },
+    buttonTitles: {
+      csv: $t('package.trends.download_file', { fileType: 'CSV' }),
+      img: $t('package.trends.download_file', { fileType: 'PNG' }),
+      svg: $t('package.trends.download_file', { fileType: 'SVG' }),
+      annotator: $t('package.trends.toggle_annotator'),
+      altCopy: $t('package.trends.copy_alt.button_label'),
+    },
+    callbacks: {
+      img: args => {
+        const imageUri = args?.imageUri
+        if (!imageUri) return
+        downloadFileLink(imageUri, buildExportFilename('png'))
+      },
+      csv: csvStr => {
+        if (!csvStr) return
+
+        const subtitle = $t('package.trends.downloads_heatmap.title', dateRange.value)
+        const csv = csvStr
+          .replace('data:text/csv;charset=utf-8,', '')
+          .replace(`\n${subtitle}`, ` ${subtitle}`)
+
+        const url = URL.createObjectURL(new Blob([csv], { type: 'text/csv;charset=utf-8' }))
+        downloadFileLink(url, buildExportFilename('csv'))
+        URL.revokeObjectURL(url)
+      },
+      svg: args => {
+        const blob = args?.blob
+        if (!blob) return
+        const url = URL.createObjectURL(blob)
+        downloadFileLink(url, buildExportFilename('svg'))
+        URL.revokeObjectURL(url)
+      },
+      altCopy: () => {
+        copyAltTextFromDownloadsHeatmap({
+          dataset: dataset.value,
+          config: {
+            packageName: props.packageName,
+            dateRange: dateRange.value,
+            weekStarts: heatmap.value.weekStarts,
+            reportedDates: heatmap.value.reportedDates,
+            anomalousDates: heatmap.value.anomalousDates,
+            locale: locale.value,
+            copy,
+            $t,
+          },
+        })
+      },
+    },
+  },
+  style: {
+    fontFamily: 'inherit',
+    backgroundColor: colors.value.bg,
+    color: colors.value.fg,
+    layout: {
+      height: 269,
+      padding: { top: 0, bottom: 96, left: -12 },
+      cells: {
+        height: 24,
+        rowTotal: { value: { show: false }, color: { show: false } },
+        columnTotal: {
+          value: { show: false, rotation: 0, offsetX: 0, offsetY: 0 },
+          color: { show: false },
+        },
+        value: {
+          show: false,
+          fontSize: 8,
+          bold: false,
+          roundingValue: 0,
+          color: isDarkMode.value ? '#FAFAFA' : '#1A1A1A',
+        },
+        colors: {
+          hot: accent.value,
+          cold: colors.value.bg,
+          underlayer: colors.value.bg,
+        },
+        spacing: CELL_SPACING,
+        selected: { border: 2, color: colors.value.fg },
+      },
+      dataLabels: {
+        xAxis: {
+          show: true,
+          values: heatmap.value.xAxisValues,
+          fontSize: 12,
+          color: isDarkMode.value ? '#BBBBBB' : '#1A1A1A',
+          bold: false,
+          offsetX: 0,
+          offsetY: 12,
+          showOnlyAtModulo: 1,
+          autoRotate: { enable: false },
+        },
+        yAxis: {
+          show: true,
+          values: weekdayLabels.value,
+          fontSize: 14,
+          color: isDarkMode.value ? '#BBBBBB' : '#1A1A1A',
+          bold: false,
+          offsetY: 0,
+          offsetX: 0,
+        },
+      },
+    },
+    title: {
+      textAlign: isRTL.value ? 'center' : 'left',
+      text: props.packageName,
+      color: colors.value.fg,
+      fontSize: 16,
+      bold: false,
+      margin: '0 0 6px 0',
+      subtitle: {
+        color: '#A1A1A1',
+        text: $t('package.trends.downloads_heatmap.title', dateRange.value),
+        fontSize: 12,
+        bold: false,
+      },
+    },
+    legend: {
+      show: false,
+      backgroundColor: isDarkMode.value ? '#1A1A1A' : '#f3f4f6',
+      color: isDarkMode.value ? '#BBBBBB' : '#1A1A1A',
+      fontSize: 12,
+      bold: true,
+      roundingValue: 0,
+      width: 48,
+    },
+    tooltip: {
+      position: tooltipPosition.value,
+      show: true,
+      backgroundColor: isDarkMode.value ? '#1A1A1A' : '#FFFFFF',
+      color: isDarkMode.value ? '#BBBBBB' : '#1A1A1A',
+      fontSize: 14,
+      offsetX: 24,
+      offsetY: -36,
+      backgroundOpacity: 20,
+      borderColor: colors.value.border,
+    },
+  },
+}))
+
+function getTooltipDate(
+  datapoint: VueUiHeatmapDatapoint,
+  seriesIndex: number,
+  series: VueUiHeatmapRow[],
+): string {
+  const columnIndex =
+    series?.[seriesIndex]?.temperatures?.findIndex(
+      temperature => temperature.id === datapoint?.id,
+    ) ?? -1
+  const weekStart = heatmap.value.weekStarts[columnIndex]
+  if (!weekStart || seriesIndex < 0 || seriesIndex >= DAYS_PER_WEEK) return ''
+  return tooltipDateFormatter.value.format(addDays(parseIsoDate(weekStart), seriesIndex))
+}
+
+function isUnknownTooltipDay(
+  datapoint: VueUiHeatmapDatapoint,
+  seriesIndex: number,
+  series: VueUiHeatmapRow[],
+): boolean {
+  const columnIndex =
+    series?.[seriesIndex]?.temperatures?.findIndex(
+      temperature => temperature.id === datapoint?.id,
+    ) ?? -1
+  const weekStart = heatmap.value.weekStarts[columnIndex]
+  if (!weekStart || seriesIndex < 0 || seriesIndex >= DAYS_PER_WEEK) return false
+  const key = toIsoDate(addDays(parseIsoDate(weekStart), seriesIndex))
+  return columnIndex >= WEEK_COUNT - 2 && !heatmap.value.reportedDates.has(key)
+}
+
+function getCellDate(cell: VueUiHeatmapCell): Date | null {
+  const weekStart = heatmap.value.weekStarts[cell.columnIndex]
+  return weekStart ? addDays(parseIsoDate(weekStart), cell.rowIndex) : null
+}
+
+function isUnrecorded(cell: VueUiHeatmapCell): boolean {
+  const date = getCellDate(cell)
+  if (!date) return false
+  const key = toIsoDate(date)
+  return (
+    heatmap.value.anomalousDates.has(key) ||
+    (heatmap.value.reportedDates.has(key) && cell.datapoint.value === 0) ||
+    showUnknownDay(cell)
+  )
+}
+
+function showUnknownDay(cell: VueUiHeatmapCell): boolean {
+  const date = getCellDate(cell)
+  return (
+    !!date &&
+    cell.columnIndex >= WEEK_COUNT - 2 &&
+    !heatmap.value.reportedDates.has(toIsoDate(date))
+  )
+}
+
+function getMissingDaySymbol(cell: VueUiHeatmapCell): string {
+  const cx = cell.x + cell.width / 2
+  const cy = cell.y + cell.height / 2
+  const date = getCellDate(cell)
+  const isPending = showUnknownDay(cell) && !!date && date >= toUtcDay(new Date())
+  const shape = isPending ? '' : '-6-6m6 6 6 6m0-12-12 12'
+  return `m${cx} ${cy}${shape}`
+}
+
+/**
+ * Adapt legend placement depending on the locale direction
+ */
+function getLegendContent(svg: VueUiHeatmapSvgSlotProps['svg']) {
+  const y = svg.drawingArea.bottom + 10
+  const lineHeight = 24
+  const fontSize = 16
+  const fill = colors.value.fgSubtle
+  const textAnchor = 'start'
+  const dominantBaseline = 'middle'
+  const colorMarkerConfig = { width: 16, height: 16, stroke: colors.value.border }
+  const textConfig = {
+    'font-size': fontSize,
+    'dominant-baseline': dominantBaseline,
+    'text-anchor': textAnchor,
+    'fill': fill,
+    'direction': isRTL.value ? 'rtl' : 'ltr',
+  }
+  const anomaliesConfig = {
+    'stroke': isDarkMode.value ? colors.value.borderHover : colors.value.border,
+    'stroke-width': 2,
+    'fill': 'none',
+  }
+
+  if (isRTL.value) {
+    const x = svg.width - 30
+    return {
+      anomalies: {
+        marker: {
+          d: `m${x} ${y}-7-7m7 7 7 7m-14 0 14-14`,
+          ...anomaliesConfig,
+        },
+        text: {
+          x: x - 26,
+          y: y + 1,
+          ...textConfig,
+        },
+      },
+      min: {
+        marker: { x: x - 8, y: y + 15, fill: minMax.value.min.color, ...colorMarkerConfig },
+        text: {
+          x: x - 26,
+          y: y + lineHeight + 1,
+          ...textConfig,
+        },
+      },
+      max: {
+        marker: {
+          x: x - 8,
+          y: y + lineHeight + 15,
+          fill: minMax.value.max.color,
+          ...colorMarkerConfig,
+        },
+        text: {
+          x: x - 26,
+          y: y + lineHeight * 2 + 1,
+          ...textConfig,
+        },
+      },
+    }
+  }
+
+  const x = svg.drawingArea.left + 25
+  return {
+    anomalies: {
+      marker: {
+        d: `m${x} ${y}-7-7m7 7 7 7m-14 0 14-14`,
+        ...anomaliesConfig,
+      },
+      text: {
+        x: x + 16,
+        y: y + 1,
+        ...textConfig,
+      },
+    },
+    min: {
+      marker: { x: x - 8, y: y + 15, fill: minMax.value.min.color, ...colorMarkerConfig },
+      text: {
+        x: x + 16,
+        y: y + lineHeight + 1,
+        ...textConfig,
+      },
+    },
+    max: {
+      marker: {
+        x: x - 8,
+        y: y + lineHeight + 15,
+        fill: minMax.value.max.color,
+        ...colorMarkerConfig,
+      },
+      text: {
+        x: x + 16,
+        y: y + lineHeight * 2 + 1,
+        ...textConfig,
+      },
+    },
+  }
+}
+</script>
+
+<template>
+  <div class="w-full font-mono">
+    <div v-if="fetchError" class="py-6 text-sm text-red-600 dark:text-red-400" role="alert">
+      {{ fetchError }}
+    </div>
+    <SkeletonBlock v-else-if="isLoading" class="aspect-[676/172]" />
+    <div v-else-if="source.length" class="w-full overflow-visible">
+      <ClientOnly>
+        <div>
+          <VueUiHeatmap ref="chartRef" :dataset="dataset" :config="config" class="[direction:ltr]">
+            <!-- Keyboard navigation hint -->
+            <template #hint="{ isVisible }">
+              <p
+                v-if="isVisible"
+                class="text-accent text-xs -mt-5 text-center px-2"
+                aria-hidden="true"
+              >
+                {{ $t('package.trends.downloads_heatmap.nav_hint') }}
+              </p>
+            </template>
+
+            <template #svg="{ svg }">
+              <template v-for="cell in svg.cells" :key="cell.datapoint.id">
+                <g v-if="isUnrecorded(cell)" pointer-events="none">
+                  <rect
+                    :x="cell.x + 2"
+                    :y="cell.y + 2"
+                    :width="Math.max(0, cell.width - 4)"
+                    :height="Math.max(0, cell.height - 4)"
+                    :fill="colors.bg"
+                  />
+                  <path
+                    :d="getMissingDaySymbol(cell)"
+                    :stroke="isDarkMode ? colors.borderHover : colors.border"
+                    stroke-linecap="round"
+                    :stroke-width="showUnknownDay(cell) ? 1.5 : 2"
+                    fill="none"
+                  />
+                </g>
+              </template>
+
+              <!-- BOTTOM LEGEND -->
+              <template v-for="legend in [getLegendContent(svg)]" :key="'legend'">
+                <!-- Anomalies -->
+                <path v-bind="legend.anomalies.marker" />
+                <text v-bind="legend.anomalies.text">
+                  {{ $t('package.trends.downloads_heatmap.legend.anomalies') }}
+                </text>
+
+                <!-- Max -->
+                <rect v-bind="legend.max.marker" />
+                <text v-bind="legend.max.text">
+                  {{
+                    $t('package.trends.downloads_heatmap.legend.max', {
+                      value: minMax.max.value,
+                      date: minMax.max.date,
+                    })
+                  }}
+                </text>
+
+                <!-- Min -->
+                <rect v-bind="legend.min.marker" />
+                <text v-bind="legend.min.text">
+                  {{
+                    $t('package.trends.downloads_heatmap.legend.min', {
+                      value: minMax.min.value,
+                      date: minMax.min.date,
+                    })
+                  }}
+                </text>
+              </template>
+
+              <!-- Print watermark-->
+              <g
+                v-if="svg.isPrintingSvg || svg.isPrintingImg || isCopyingPng"
+                v-html="
+                  drawSmallNpmxLogoAndTaglineWatermark({
+                    svg: {
+                      ...svg,
+                    },
+                    colors: watermarkColors,
+                    translateFn: $t,
+                  })
+                "
+              />
+            </template>
+
+            <!-- Custom tooltip -->
+            <template #tooltip="{ datapoint, seriesIndex, series }">
+              <div class="px-1 text-start font-mono">
+                <div class="mt-0.5 text-xs text-gray-900 dark:text-gray-100">
+                  {{ getTooltipDate(datapoint, seriesIndex, series) }}
+                </div>
+                <div class="mt-2 flex items-center gap-2">
+                  <span
+                    class="h-3.5 w-3.5 shrink-0 relative"
+                    :style="{
+                      backgroundColor: datapoint.color,
+                      border: `0.5px solid ${adaptColorToBackground(datapoint.color, {
+                        dark: isDarkMode ? '#3A3A3A' : '#6A6A6A',
+                        light: isDarkMode ? '#6A6A6A' : '#CCCCCC',
+                      })}`,
+                    }"
+                  >
+                    <svg
+                      v-if="
+                        !isUnknownTooltipDay(datapoint, seriesIndex, series) && !datapoint.value
+                      "
+                      viewBox="0 0 16 16"
+                      class="absolute top-1/2 inset-is-1/2 -translate-x-1/2 -translate-y-1/2 w-full p-0.25"
+                    >
+                      <path
+                        d="M8 8 1 1M8 8 15 15M1 15 15 1"
+                        :stroke="isDarkMode ? colors.borderHover : colors.border"
+                        stroke-width="2"
+                        fill="none"
+                      />
+                    </svg>
+                  </span>
+                  <span class="text-sm text-gray-700 dark:text-gray-300">
+                    {{
+                      isUnknownTooltipDay(datapoint, seriesIndex, series)
+                        ? '-'
+                        : compactNumberFormatter.format(Number(datapoint.value) || 0)
+                    }}
+                  </span>
+                </div>
+              </div>
+            </template>
+
+            <!-- Chart context menu -->
+            <template #menuIcon="{ isOpen }">
+              <span v-if="isOpen" class="i-lucide:x w-6 h-6" aria-hidden="true" />
+              <span v-else class="i-lucide:ellipsis-vertical w-6 h-6" aria-hidden="true" />
+            </template>
+            <template #optionCsv>
+              <span class="text-fg-subtle font-mono pointer-events-none">CSV</span>
+            </template>
+            <template #custom-menu-before>
+              <ChartCopyPngButton
+                :copied="copiedPng"
+                :copying="isCopyingPng"
+                @click="copyChartPng"
+              />
+            </template>
+            <template #optionImg>
+              <span class="text-fg-subtle font-mono pointer-events-none">PNG</span>
+            </template>
+            <template #optionSvg>
+              <span class="text-fg-subtle font-mono pointer-events-none">SVG</span>
+            </template>
+
+            <template #optionAltCopy>
+              <span
+                class="w-6 h-6"
+                :class="
+                  copied ? 'i-lucide:check text-accent' : 'i-lucide:person-standing text-fg-subtle'
+                "
+                style="pointer-events: none"
+                aria-hidden="true"
+              />
+            </template>
+
+            <template v-for="slotName in CHART_ANNOTATOR_SLOTS" #[slotName]="slotProps">
+              <span
+                v-if="getAnnotatorIcon(slotName, slotProps)"
+                class="w-6 h-6"
+                :class="[
+                  getAnnotatorIcon(slotName, slotProps),
+                  slotName === 'annotator-action-color' ? null : 'text-fg-subtle',
+                ]"
+                :style="getAnnotatorStyle(slotName, slotProps)"
+                aria-hidden="true"
+              />
+            </template>
+          </VueUiHeatmap>
+        </div>
+        <template #fallback>
+          <SkeletonBlock class="aspect-[676/172]" />
+        </template>
+      </ClientOnly>
+    </div>
+    <p v-else class="py-6 text-sm text-fg-subtle">
+      {{ $t('package.trends.no_data') }}
+    </p>
+  </div>
+</template>
diff --git a/app/pages/package-stats/[[org]]/[packageName].vue b/app/pages/package-stats/[[org]]/[packageName].vue
index d9fa54ef1f..57337ce838 100644
--- a/app/pages/package-stats/[[org]]/[packageName].vue
+++ b/app/pages/package-stats/[[org]]/[packageName].vue
@@ -136,6 +136,14 @@ useSeoMeta({
             permalink
           />
         </section>
+
+        <section id="daily-downloads-heatmap" class="mt-12">
+          <h2 class="text-fg-muted mb-6 uppercase">
+            {{ $t('package.stats.daily_downloads_heatmap') }}
+          </h2>
+          <PackageDailyDownloadsHeatmap :package-name="packageName" />
+        </section>
+
         <section id="distribution" class="mt-12">
           <h2 class="text-fg-muted mb-6 uppercase">
             {{ $t('package.stats.version_distribution') }}
diff --git a/app/utils/charts.ts b/app/utils/charts.ts
index fbe88535da..3ac00eb48c 100644
--- a/app/utils/charts.ts
+++ b/app/utils/charts.ts
@@ -9,7 +9,9 @@ import type {
   VueUiStackbarConfig,
   VueUiStackbarFormattedDatasetItem,
 } from 'vue-data-ui'
+import type { VueUiHeatmapDatasetItem } from 'vue-data-ui/vue-ui-heatmap'
 import type { ChartTimeGranularity } from '~/types/chart'
+import { addDays, parseIsoDate, toIsoDate } from '~/utils/date'
 
 interface SubEvent {
   key: string
@@ -968,6 +970,161 @@ export async function copyAltTextForTimelineStackbar({
   await config.copy(altText)
 }
 
+// Used for DailyDownloadsHeatmap
+export type DownloadsHeatmapAltConfig = {
+  packageName: string
+  dateRange: { from: string; to: string }
+  weekStarts: string[]
+  reportedDates: ReadonlySet<string>
+  anomalousDates: ReadonlySet<string>
+  locale: string
+  copy: (text: string) => Promise<void>
+  $t: TrendTranslateFunction
+}
+
+export function createAltTextFromDownloadsHeatmap({
+  dataset,
+  config,
+}: AltCopyArgs<VueUiHeatmapDatasetItem[], DownloadsHeatmapAltConfig>): string {
+  const { $t, locale } = config
+
+  const numberFormatter = new Intl.NumberFormat(locale)
+  const dateFormatter = new Intl.DateTimeFormat(locale, {
+    dateStyle: 'long',
+    timeZone: 'UTC',
+  })
+  const weekdayFormatter = new Intl.DateTimeFormat(locale, {
+    weekday: 'long',
+    timeZone: 'UTC',
+  })
+  const percentageFormatter = new Intl.NumberFormat(locale, {
+    style: 'percent',
+    maximumFractionDigits: 1,
+    signDisplay: 'exceptZero',
+  })
+
+  const date_range = $t('package.trends.downloads_heatmap.title', config.dateRange)
+  const introduction = $t('package.trends.downloads_heatmap.copy_alt.introduction', {
+    package_name: config.packageName,
+    date_range,
+  })
+
+  const watermark = $t('package.trends.copy_alt.watermark')
+
+  const days = dataset.flatMap((row, weekdayIndex) =>
+    row.values.flatMap((value, weekIndex) => {
+      const weekStart = config.weekStarts[weekIndex]
+      if (!weekStart) return []
+
+      const date = addDays(parseIsoDate(weekStart), weekdayIndex)
+      const key = toIsoDate(date)
+
+      if (
+        !config.reportedDates.has(key) ||
+        config.anomalousDates.has(key) ||
+        typeof value !== 'number' ||
+        !Number.isFinite(value) ||
+        value <= 0
+      ) {
+        return []
+      }
+
+      return [{ date, value, weekdayIndex, weekIndex }]
+    }),
+  )
+
+  if (!days.length) {
+    return [introduction, $t('package.trends.downloads_heatmap.copy_alt.no_data'), watermark].join(
+      ' ',
+    )
+  }
+  const total = sum(days.map(day => day.value))
+  const average = total / days.length
+  const peak = days.reduce((highest, day) => (day.value > highest.value ? day : highest))
+  const weekdayStats = Array.from({ length: 7 }, (_, index) => {
+    const entries = days.filter(day => day.weekdayIndex === index)
+
+    return {
+      date: entries[0]?.date,
+      average: entries.length ? sum(entries.map(day => day.value)) / entries.length : 0,
+    }
+  }).filter(day => day.date)
+
+  const busiestWeekday = weekdayStats.reduce((busiest, day) =>
+    day.average > busiest.average ? day : busiest,
+  )
+  const weekdays = days.filter(day => !isWeekend(day.date))
+  const weekends = days.filter(day => isWeekend(day.date))
+  const averageWeekday = weekdays.length ? sum(weekdays.map(day => day.value)) / weekdays.length : 0
+  const averageWeekend = weekends.length ? sum(weekends.map(day => day.value)) / weekends.length : 0
+  const completeWeeks = config.weekStarts.flatMap((_, weekIndex) => {
+    const entries = days.filter(day => day.weekIndex === weekIndex)
+
+    return entries.length === 7 ? [sum(entries.map(day => day.value))] : []
+  })
+
+  const firstWeek = completeWeeks[0]
+  const lastWeek = completeWeeks.at(-1)
+
+  const weekly_trend =
+    firstWeek !== undefined && lastWeek !== undefined && completeWeeks.length > 1 && firstWeek > 0
+      ? $t('package.trends.downloads_heatmap.copy_alt.weekly_trend', {
+          change: percentageFormatter.format((lastWeek - firstWeek) / firstWeek),
+          first: numberFormatter.format(firstWeek),
+          last: numberFormatter.format(lastWeek),
+        })
+      : ''
+
+  const excludedDays = config.weekStarts.length * dataset.length - days.length
+
+  return [
+    introduction,
+    $t('package.trends.downloads_heatmap.copy_alt.summary', {
+      total: numberFormatter.format(total),
+      average: numberFormatter.format(Math.round(average)),
+      days: numberFormatter.format(days.length),
+    }),
+    $t('package.trends.downloads_heatmap.copy_alt.peak', {
+      date: dateFormatter.format(peak.date),
+      downloads: numberFormatter.format(peak.value),
+    }),
+    busiestWeekday?.date
+      ? $t('package.trends.downloads_heatmap.copy_alt.busiest_weekday', {
+          weekday: weekdayFormatter.format(busiestWeekday.date),
+          average: numberFormatter.format(Math.round(busiestWeekday.average)),
+        })
+      : '',
+    weekdays.length && weekends.length
+      ? $t('package.trends.downloads_heatmap.copy_alt.weekday_comparison', {
+          weekdays: numberFormatter.format(Math.round(averageWeekday)),
+          weekends: numberFormatter.format(Math.round(averageWeekend)),
+        })
+      : '',
+    weekly_trend,
+    excludedDays > 0
+      ? $t('package.trends.downloads_heatmap.copy_alt.excluded_days', {
+          count: numberFormatter.format(excludedDays),
+        })
+      : '',
+    watermark,
+  ]
+    .filter(Boolean)
+    .join(' ')
+}
+
+function isWeekend(date: Date): boolean {
+  const day = date.getUTCDay()
+  return day === 0 || day === 6
+}
+
+export async function copyAltTextFromDownloadsHeatmap({
+  dataset,
+  config,
+}: AltCopyArgs<VueUiHeatmapDatasetItem[], DownloadsHeatmapAltConfig>) {
+  const altText = createAltTextFromDownloadsHeatmap({ dataset, config })
+  await config.copy(altText)
+}
+
 export function sanitise(value: string) {
   return value
     .replace(/^@/, '')
diff --git a/i18n/locales/en.json b/i18n/locales/en.json
index b66dcdaaa6..24bfb36fde 100644
--- a/i18n/locales/en.json
+++ b/i18n/locales/en.json
@@ -508,7 +508,8 @@
       },
       "main_information": "Main Information",
       "trends": "Trends",
-      "version_distribution": "Version Distribution"
+      "version_distribution": "Version Distribution",
+      "daily_downloads_heatmap": "Daily downloads heatmap"
     },
     "skills": {
       "title": "Agent Skills",
@@ -841,6 +842,25 @@
       "sparkline_zoom_reset": {
         "title": "Reset zoom · double-click chart or press Esc",
         "aria_label": "Reset zoom"
+      },
+      "downloads_heatmap": {
+        "title": "Daily downloads: last 52 weeks, from {from} to {to}",
+        "legend": {
+          "anomalies": "Days with missing or anomalous download counts",
+          "max": "Max: {value} downloads on {date}",
+          "min": "Min: {value} downloads on {date}"
+        },
+        "nav_hint": "Use ← → ↑ ↓",
+        "copy_alt": {
+          "introduction": "Daily downloads heatmap for the {package_name} package. {date_range}.",
+          "no_data": "No reliable download data is available for this period.",
+          "summary": "A total of {total} downloads were recorded across {days} days, averaging {average} downloads per day.",
+          "peak": "The highest daily activity occurred on {date}, with {downloads} downloads.",
+          "busiest_weekday": "The busiest day of the week was {weekday}, averaging {average} downloads.",
+          "weekday_comparison": "On average, weekdays recorded {weekdays} downloads per day, compared with {weekends} on weekends.",
+          "weekly_trend": "Between the first and last complete weeks with reliable data, weekly downloads changed by {change}, from {first} to {last}.",
+          "excluded_days": "{count} calendar days were excluded from these statistics because of missing, anomalous, or not-yet-available data."
+        }
       }
     },
     "downloads": {
diff --git a/i18n/locales/fr-FR.json b/i18n/locales/fr-FR.json
index 124c2fd25a..90a9122200 100644
--- a/i18n/locales/fr-FR.json
+++ b/i18n/locales/fr-FR.json
@@ -427,7 +427,8 @@
       "size_tooltip": {
         "unpacked": "{size} taille décompressée (ce paquet)",
         "total": "{size} taille totale décompressée (incluant les {count} dépendances pour linux-x64)"
-      }
+      },
+      "daily_downloads_heatmap": "Carte thermique des téléchargements quotidiens"
     },
     "skills": {
       "title": "Compétences de l'agent",
@@ -732,6 +733,25 @@
       "sparkline_zoom_reset": {
         "title": "Réinitialiser le zoom · double-cliquez sur le graphique ou appuyez sur Esc",
         "aria_label": "Réinitialiser le zoom"
+      },
+      "downloads_heatmap": {
+        "title": "Téléchargements quotidiens: dernières 52 semaines, du {from} au {to}",
+        "legend": {
+          "anomalies": "Jours avec des données manquantes ou en anomalie",
+          "max": "Max: {value} téléchargements le {date}",
+          "min": "Min: {value} téléchargements le {date}"
+        },
+        "nav_hint": "Utilisez ← → ↑ ↓",
+        "copy_alt": {
+          "introduction": "Carte thermique des téléchargements quotidiens du paquet {package_name}. {date_range}.",
+          "no_data": "Aucune donnée de téléchargement fiable n'est disponible pour cette période.",
+          "summary": "Un total de {total} téléchargements a été enregistré sur {days} jours, soit une moyenne de {average} téléchargements par jour.",
+          "peak": "Le pic d'activité a été atteint le {date}, avec {downloads} téléchargements.",
+          "busiest_weekday": "Le jour de la semaine le plus actif était le {weekday}, avec une moyenne de {average} téléchargements.",
+          "weekday_comparison": "En moyenne, les jours de semaine ont enregistré {weekdays} téléchargements par jour, contre {weekends} le week-end.",
+          "weekly_trend": "Entre la première et la dernière semaine complète disposant de données fiables, le nombre de téléchargements hebdomadaires a varié de {change}, passant de {first} à {last}.",
+          "excluded_days": "{count} jours calendaires ont été exclus de ces statistiques en raison de données manquantes, anormales ou pas encore disponibles."
+        }
       }
     },
     "downloads": {
diff --git a/i18n/schema.json b/i18n/schema.json
index 86c5ba13b2..6514e92e8e 100644
--- a/i18n/schema.json
+++ b/i18n/schema.json
@@ -1530,6 +1530,9 @@
             },
             "version_distribution": {
               "type": "string"
+            },
+            "daily_downloads_heatmap": {
+              "type": "string"
             }
           },
           "additionalProperties": false
@@ -2529,6 +2532,63 @@
                 }
               },
               "additionalProperties": false
+            },
+            "downloads_heatmap": {
+              "type": "object",
+              "properties": {
+                "title": {
+                  "type": "string"
+                },
+                "legend": {
+                  "type": "object",
+                  "properties": {
+                    "anomalies": {
+                      "type": "string"
+                    },
+                    "max": {
+                      "type": "string"
+                    },
+                    "min": {
+                      "type": "string"
+                    }
+                  },
+                  "additionalProperties": false
+                },
+                "nav_hint": {
+                  "type": "string"
+                },
+                "copy_alt": {
+                  "type": "object",
+                  "properties": {
+                    "introduction": {
+                      "type": "string"
+                    },
+                    "no_data": {
+                      "type": "string"
+                    },
+                    "summary": {
+                      "type": "string"
+                    },
+                    "peak": {
+                      "type": "string"
+                    },
+                    "busiest_weekday": {
+                      "type": "string"
+                    },
+                    "weekday_comparison": {
+                      "type": "string"
+                    },
+                    "weekly_trend": {
+                      "type": "string"
+                    },
+                    "excluded_days": {
+                      "type": "string"
+                    }
+                  },
+                  "additionalProperties": false
+                }
+              },
+              "additionalProperties": false
             }
           },
           "additionalProperties": false
diff --git a/nuxt.config.ts b/nuxt.config.ts
index 69107bd127..78a22df1ea 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -456,6 +456,7 @@ export default defineNuxtConfig({
         'vue-data-ui/vue-ui-scatter',
         'vue-data-ui/vue-ui-horizontal-bar',
         'vue-data-ui/vue-ui-stackbar',
+        'vue-data-ui/vue-ui-heatmap',
         'virtua/vue',
         'verkit',
         'validate-npm-package-name',
diff --git a/package.json b/package.json
index 1b385ea0bf..69d3b3c430 100644
--- a/package.json
+++ b/package.json
@@ -112,7 +112,7 @@
     "vite-plugin-pwa": "2.0.0",
     "vite-plus": "catalog:vite-plus",
     "vue": "3.5.42",
-    "vue-data-ui": "3.26.1",
+    "vue-data-ui": "3.27.1",
     "vue-router": "5.2.0"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 079273bae4..d0ae429332 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -277,8 +277,8 @@ importers:
         specifier: 3.5.42
         version: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
       vue-data-ui:
-        specifier: 3.26.1
-        version: 3.26.1(vue@3.5.42)
+        specifier: 3.27.1
+        version: 3.27.1(vue@3.5.42)
       vue-router:
         specifier: 5.2.0
         version: 5.2.0(@voidzero-dev/vite-plus-core@1.1.0)(@vue/compiler-sfc@3.5.42)(esbuild@0.28.1)(rolldown@1.2.4)(rollup@4.62.2)(vue@3.5.42)(webpack@5.108.4)
@@ -5325,9 +5325,6 @@ packages:
   '@vue/language-core@3.3.13':
     resolution: {integrity: sha512-axA0Xemn5LuUKuKWob0/kVq7xQ2mJJM6VqA9Exvt35nM9yRC31goWVve/G/Zb2ZCLsXC8FHYjjfXlnshknSCew==}
 
-  '@vue/language-core@3.3.6':
-    resolution: {integrity: sha512-LgBMZAy2sR3cQWknpyaxnI6yBkqDfLBPkbdhwRhQCvzfNJRQXPilgQIrdI/v4ytJ0sAq9bWhaPsjqBqneomJ3Q==}
-
   '@vue/reactivity@3.5.42':
     resolution: {integrity: sha512-TzNNfKpb7hDxbQltwAut8VDQA5YP+BuRlxntHUuRjyKwlMvmAPbs3unhCvieijifY6vFfVBwsS7wG/C7uq+bEQ==}
 
@@ -10713,19 +10710,11 @@ packages:
       typescript:
         optional: true
 
-  vue-component-meta@3.3.6:
-    resolution: {integrity: sha512-kPNTwuLzqYDvsE2CiDPSbt89aypZwYoCRxtbUfbkfOgy3DV130G3Z1jJuRBct64vxB2Lii6fcih8FJba8dLoXQ==}
-    peerDependencies:
-      typescript: '*'
-    peerDependenciesMeta:
-      typescript:
-        optional: true
-
   vue-component-type-helpers@3.3.12:
     resolution: {integrity: sha512-HwCqmgTfLFskQc4P5TRnbduCMyPat2Ezu0elLWOGn0dD/6BKHP15B5bxce6aDi+E4kblPtru8amIBQzu0Di3qQ==}
 
-  vue-data-ui@3.26.1:
-    resolution: {integrity: sha512-qK+AwCeqbfzWEw8c+729SQ3WTXJvdYSGipv2Jw5j+lRjSn0omnLa3KyiJ+jroCuZsTuSZHHY/HYKHe6kFmEZkg==}
+  vue-data-ui@3.27.1:
+    resolution: {integrity: sha512-eeJ23pqP8+RwDtsHMZ3zIxX0HpkyuIHoXF59pwP0Au/INb5EqoutR9HjzMtANgZ1yKOUQZY70NK5QNq/IwISWA==}
     peerDependencies:
       jspdf: '>=3.0.1'
       vue: 3.5.42
@@ -16623,16 +16612,6 @@ snapshots:
       path-browserify: 1.0.1
       picomatch: 4.0.7
 
-  '@vue/language-core@3.3.6':
-    dependencies:
-      '@volar/language-core': 2.4.28
-      '@vue/compiler-dom': 3.5.42
-      '@vue/shared': 3.5.42
-      alien-signals: 3.2.1
-      muggle-string: 0.4.1
-      path-browserify: 1.0.1
-      picomatch: 4.0.7
-
   '@vue/reactivity@3.5.42':
     dependencies:
       '@vue/shared': 3.5.42
@@ -20394,7 +20373,7 @@ snapshots:
       scule: 1.3.0
       typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
       ufo: 1.6.4
-      vue-component-meta: 3.3.6(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
+      vue-component-meta: 3.3.13(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
     transitivePeerDependencies:
       - magic-string
       - magicast
@@ -23374,17 +23353,9 @@ snapshots:
     optionalDependencies:
       typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
 
-  vue-component-meta@3.3.6(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2):
-    dependencies:
-      '@volar/typescript': 2.4.28(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
-      '@vue/language-core': 3.3.6
-      path-browserify: 1.0.1
-    optionalDependencies:
-      typescript: typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2
-
   vue-component-type-helpers@3.3.12: {}
 
-  vue-data-ui@3.26.1(vue@3.5.42):
+  vue-data-ui@3.27.1(vue@3.5.42):
     dependencies:
       vue: 3.5.42(typescript-native-bridge@6.0.3-bridge.13.tsgo.7.0.2)
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index db7fd4da84..e9a35d5e4b 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -48,7 +48,7 @@ minimumReleaseAgeExclude:
   - '@nuxt/nitro-server@4.5.2'
   - '@nuxt/schema@4.5.2'
   - '@nuxt/vite-builder@4.5.2'
-  - vue-data-ui@3.26.1
+  - vue-data-ui@3.27.1
 
 minimumReleaseAgeExcludePrune: true
 
diff --git a/test/nuxt/a11y.spec.ts b/test/nuxt/a11y.spec.ts
index 13f9b0983f..b204b3f443 100644
--- a/test/nuxt/a11y.spec.ts
+++ b/test/nuxt/a11y.spec.ts
@@ -1,6 +1,6 @@
 import { DEFAULT_FILTERS, type ColumnConfig, type FilterChip } from '#shared/types/preferences'
-import { mountSuspended, registerEndpoint } from '@nuxt/test-utils/runtime'
-import type { VueWrapper } from '@vue/test-utils'
+import { mountSuspended, registerEndpoint, mockNuxtImport } from '@nuxt/test-utils/runtime'
+import { flushPromises, type VueWrapper } from '@vue/test-utils'
 import 'axe-core'
 import type { AxeResults, RunOptions } from 'axe-core'
 import { afterEach, beforeEach, describe, expect, it, type MockInstance, vi } from 'vitest'
@@ -11,6 +11,8 @@ declare const axe: {
   run: (context: Element, options?: RunOptions) => Promise<AxeResults>
 }
 
+mockNuxtImport('useCharts', original => vi.fn(original))
+
 // Track mounted containers for cleanup
 const mountedContainers: HTMLElement[] = []
 
@@ -128,6 +130,53 @@ vi.mock('vue-data-ui/vue-ui-xy', () => {
   }
 })
 
+// VueUiHeatmap relies on browser measurements that are not
+// available in isolated a11y tests. Keep the component's SVG slot rendered.
+vi.mock('vue-data-ui/vue-ui-heatmap', () => {
+  return {
+    VueUiHeatmap: defineComponent({
+      name: 'VueUiHeatmap',
+      inheritAttrs: false,
+      props: {
+        dataset: { type: Array, default: () => [] },
+        config: { type: Object, default: () => ({}) },
+      },
+      setup(props, { slots }) {
+        return () => {
+          const rows = props.dataset as Array<{ values: Array<number | null> }>
+          const cells = rows.flatMap((row, rowIndex) =>
+            row.values.map((value, columnIndex) => ({
+              rowIndex,
+              columnIndex,
+              x: 48 + columnIndex * 12,
+              y: 8 + rowIndex * 12,
+              width: 11,
+              height: 11,
+              datapoint: { id: `${rowIndex}-${columnIndex}`, value },
+            })),
+          )
+
+          return h('div', { 'data-test-id': 'vue-ui-heatmap-stub' }, [
+            h(
+              'svg',
+              { 'role': 'img', 'aria-label': 'Daily downloads heatmap', 'viewBox': '0 0 720 160' },
+              slots.svg?.({
+                svg: {
+                  cells,
+                  drawingArea: { left: 40, bottom: 112 },
+                  width: 720,
+                  height: 160,
+                },
+              }) ?? [],
+            ),
+            slots.default?.() ?? [],
+          ])
+        }
+      },
+    }),
+  }
+})
+
 vi.mock('~/composables/useCanGoBack', () => {
   return {
     useCanGoBack: () => shallowRef(true),
@@ -300,6 +349,7 @@ import HeaderAccountMenuServer from '~/components/Header/AccountMenu.server.vue'
 import ToggleServer from '~/components/Settings/Toggle.server.vue'
 import SearchProviderToggleServer from '~/components/SearchProviderToggle.server.vue'
 import PackageTrendsChart from '~/components/Package/TrendsChart.vue'
+import DailyDownloadsHeatmap from '~/components/Package/DailyDownloadsHeatmap.vue'
 import FacetBarChart from '~/components/Compare/FacetBarChart.vue'
 import FacetScatterChart from '~/components/Compare/FacetScatterChart.vue'
 import PackageTimelineChart from '~/components/Package/TimelineChart.vue'
@@ -1501,6 +1551,51 @@ describe('component accessibility audits', () => {
     })
   })
 
+  describe('DailyDownloadsHeatmap', () => {
+    const useChartsMock = vi.mocked(useCharts)
+    const originalUseCharts = useChartsMock.getMockImplementation()!
+
+    afterEach(() => {
+      useChartsMock.mockImplementation(originalUseCharts)
+    })
+
+    it('should have no accessibility violations when loaded', async () => {
+      const now = new Date()
+
+      const fetchMock = vi.fn().mockResolvedValue([
+        {
+          day: now.toISOString().slice(0, 10),
+          timestamp: now.getTime(),
+          value: 123,
+        },
+      ])
+
+      useChartsMock.mockImplementation(() => ({
+        ...originalUseCharts(),
+        fetchPackageDownloadEvolution: fetchMock,
+      }))
+
+      const wrapper = await mountSuspended(DailyDownloadsHeatmap, {
+        props: { packageName: 'vue' },
+      })
+
+      await flushPromises()
+
+      await vi.waitFor(() => {
+        expect(wrapper.find('[data-test-id="vue-ui-heatmap-stub"]').exists()).toBe(true)
+      })
+
+      expect(fetchMock).toHaveBeenCalledWith(
+        'vue',
+        null,
+        expect.objectContaining({ granularity: 'day' }),
+      )
+
+      const results = await runAxe(wrapper)
+      expect(results.violations).toEqual([])
+    })
+  })
+
   describe('TabRoot + TabList + TabItem + TabPanel', () => {
     // oxlint-disable-next-line unicorn/consistent-function-scoping
     function createTabsFixture(modelValue: string, idPrefix: string) {
diff --git a/test/unit/app/utils/charts.spec.ts b/test/unit/app/utils/charts.spec.ts
index 7f8cd187b6..c529a63ecb 100644
--- a/test/unit/app/utils/charts.spec.ts
+++ b/test/unit/app/utils/charts.spec.ts
@@ -15,6 +15,8 @@ import {
   copyAltTextForTimelineChart,
   createAltTextForTimelineStackbar,
   copyAltTextForTimelineStackbar,
+  createAltTextFromDownloadsHeatmap,
+  copyAltTextFromDownloadsHeatmap,
   sanitise,
   insertLineBreaks,
   applyEllipsis,
@@ -23,6 +25,7 @@ import {
   type VersionsBarConfig,
   type TimelineChartConfig,
   type TimelineStackbarConfig,
+  type DownloadsHeatmapAltConfig,
   type EnrichedTimelineSizeCacheEntry,
 } from '~/utils/charts'
 import type {
@@ -1516,6 +1519,282 @@ describe('copyAltTextForTimelineStackbar', () => {
   })
 })
 
+type DownloadsHeatmapDataset = Parameters<typeof createAltTextFromDownloadsHeatmap>[0]['dataset']
+
+// Rows match the component's Sunday-to-Saturday layout, so week starts are Sundays.
+const heatmapWeekStarts = ['2026-03-01', '2026-03-08']
+const firstHeatmapWeek = [5, 10, 20, 30, 40, 50, 5]
+const secondHeatmapWeek = [10, 20, 30, 40, 50, 60, 10]
+
+function createDownloadsHeatmapDataset(
+  weeks: Array<Array<number | null>> = [firstHeatmapWeek, secondHeatmapWeek],
+): DownloadsHeatmapDataset {
+  const weekdays = ['SUN', 'MON', 'TUE', 'WED', 'THU', 'FRI', 'SAT']
+
+  return weekdays.map((name, weekdayIndex) => ({
+    name,
+    values: weeks.map(week => week[weekdayIndex] ?? null),
+  }))
+}
+
+function createDownloadsHeatmapReportedDates(weekStarts: string[]): Set<string> {
+  return new Set(
+    weekStarts.flatMap(weekStart =>
+      Array.from({ length: 7 }, (_, weekdayIndex) => {
+        const date = new Date(`${weekStart}T00:00:00Z`)
+        date.setUTCDate(date.getUTCDate() + weekdayIndex)
+        return date.toISOString().slice(0, 10)
+      }),
+    ),
+  )
+}
+
+function createDownloadsHeatmapConfig(
+  overrides: Partial<DownloadsHeatmapAltConfig> = {},
+): DownloadsHeatmapAltConfig {
+  const { translate } = createTranslateMock()
+  const weekStarts = overrides.weekStarts ?? heatmapWeekStarts
+
+  return {
+    packageName: '@scope/example',
+    dateRange: { from: '2026-03-01', to: '2026-03-14' },
+    weekStarts,
+    reportedDates: createDownloadsHeatmapReportedDates(weekStarts),
+    anomalousDates: new Set<string>(),
+    locale: 'en-US',
+    copy: vi.fn(async () => undefined),
+    $t: translate,
+    ...overrides,
+  }
+}
+
+function findHeatmapTranslation(calls: TranslateCall[], name: string) {
+  return calls.find(call => call.key === `package.trends.downloads_heatmap.copy_alt.${name}`)
+}
+
+describe('createAltTextFromDownloadsHeatmap', () => {
+  it('returns an introduction, no-data message and watermark for an empty dataset', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({ $t: translate })
+
+    const result = createAltTextFromDownloadsHeatmap({ dataset: [], config })
+
+    expect(result).toBe(
+      't:package.trends.downloads_heatmap.copy_alt.introduction ' +
+        't:package.trends.downloads_heatmap.copy_alt.no_data ' +
+        't:package.trends.copy_alt.watermark',
+    )
+    expect(
+      calls.find(call => call.key === 'package.trends.downloads_heatmap.title')?.named,
+    ).toEqual(config.dateRange)
+    expect(findHeatmapTranslation(calls, 'introduction')?.named).toEqual({
+      package_name: '@scope/example',
+      date_range: 't:package.trends.downloads_heatmap.title',
+    })
+    expect(findHeatmapTranslation(calls, 'summary')).toBeUndefined()
+  })
+
+  it('uses the no-data message when all values are zero or null', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({ $t: translate })
+    const dataset = createDownloadsHeatmapDataset([
+      [0, 0, 0, 0, 0, 0, 0],
+      [null, null, null, null, null, null, null],
+    ])
+
+    const result = createAltTextFromDownloadsHeatmap({ dataset, config })
+
+    expect(result).toContain('t:package.trends.downloads_heatmap.copy_alt.no_data')
+    expect(findHeatmapTranslation(calls, 'summary')).toBeUndefined()
+    expect(findHeatmapTranslation(calls, 'peak')).toBeUndefined()
+  })
+
+  it('computes totals, averages, peak, busiest weekday and weekday/weekend averages', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({ $t: translate })
+
+    const result = createAltTextFromDownloadsHeatmap({
+      dataset: createDownloadsHeatmapDataset(),
+      config,
+    })
+
+    expect(findHeatmapTranslation(calls, 'summary')?.named).toEqual({
+      total: '380',
+      average: '27',
+      days: '14',
+    })
+    expect(findHeatmapTranslation(calls, 'peak')?.named).toEqual({
+      date: 'March 13, 2026',
+      downloads: '60',
+    })
+    expect(findHeatmapTranslation(calls, 'busiest_weekday')?.named).toEqual({
+      weekday: 'Friday',
+      average: '55',
+    })
+    expect(findHeatmapTranslation(calls, 'weekday_comparison')?.named).toEqual({
+      weekdays: '35',
+      weekends: '8',
+    })
+    expect(result).toContain('t:package.trends.downloads_heatmap.copy_alt.summary')
+    expect(result).toContain('t:package.trends.copy_alt.watermark')
+    expect(findHeatmapTranslation(calls, 'excluded_days')).toBeUndefined()
+  })
+
+  it('calculates the trend from complete weeks using localized signed percentages', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({ $t: translate })
+
+    createAltTextFromDownloadsHeatmap({ dataset: createDownloadsHeatmapDataset(), config })
+
+    expect(findHeatmapTranslation(calls, 'weekly_trend')?.named).toEqual({
+      change: '+37.5%',
+      first: '160',
+      last: '220',
+    })
+  })
+
+  it('excludes anomalous, unreported, null, zero and non-finite values', () => {
+    const { translate, calls } = createTranslateMock()
+    const reportedDates = createDownloadsHeatmapReportedDates(heatmapWeekStarts)
+    reportedDates.delete('2026-03-13')
+    const config = createDownloadsHeatmapConfig({
+      $t: translate,
+      reportedDates,
+      anomalousDates: new Set(['2026-03-14']),
+    })
+    const dataset = createDownloadsHeatmapDataset([
+      [5, null, 0, Number.NaN, Number.POSITIVE_INFINITY, 50, 5],
+      [80, 10, 20, 30, 40, 60, 70],
+    ])
+
+    createAltTextFromDownloadsHeatmap({ dataset, config })
+
+    expect(findHeatmapTranslation(calls, 'summary')?.named).toEqual({
+      total: '240',
+      average: '30',
+      days: '8',
+    })
+    expect(findHeatmapTranslation(calls, 'peak')?.named).toEqual({
+      date: 'March 8, 2026',
+      downloads: '80',
+    })
+    expect(findHeatmapTranslation(calls, 'excluded_days')?.named).toEqual({ count: '6' })
+    expect(findHeatmapTranslation(calls, 'weekly_trend')).toBeUndefined()
+  })
+
+  it('omits the weekly trend when there is only one complete week', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({
+      $t: translate,
+      weekStarts: ['2026-03-01'],
+    })
+
+    createAltTextFromDownloadsHeatmap({
+      dataset: createDownloadsHeatmapDataset([firstHeatmapWeek]),
+      config,
+    })
+
+    expect(findHeatmapTranslation(calls, 'summary')?.named).toHaveProperty('days', '7')
+    expect(findHeatmapTranslation(calls, 'weekly_trend')).toBeUndefined()
+  })
+
+  it('compares the first and last complete weeks even when an intermediate week is incomplete', () => {
+    const { translate, calls } = createTranslateMock()
+    const weekStarts = ['2026-03-01', '2026-03-08', '2026-03-15']
+    const reportedDates = createDownloadsHeatmapReportedDates(weekStarts)
+    reportedDates.delete('2026-03-09')
+    const config = createDownloadsHeatmapConfig({
+      $t: translate,
+      weekStarts,
+      reportedDates,
+    })
+
+    createAltTextFromDownloadsHeatmap({
+      dataset: createDownloadsHeatmapDataset([
+        firstHeatmapWeek,
+        [10, 10, 10, 10, 10, 10, 10],
+        secondHeatmapWeek,
+      ]),
+      config,
+    })
+
+    expect(findHeatmapTranslation(calls, 'weekly_trend')?.named).toEqual({
+      change: '+37.5%',
+      first: '160',
+      last: '220',
+    })
+    expect(findHeatmapTranslation(calls, 'excluded_days')?.named).toEqual({ count: '1' })
+  })
+
+  it('omits the weekday/weekend comparison if no weekend data is reported', () => {
+    const { translate, calls } = createTranslateMock()
+    const reportedDates = createDownloadsHeatmapReportedDates(heatmapWeekStarts)
+    for (const date of ['2026-03-01', '2026-03-07', '2026-03-08', '2026-03-14']) {
+      reportedDates.delete(date)
+    }
+    const config = createDownloadsHeatmapConfig({ $t: translate, reportedDates })
+
+    createAltTextFromDownloadsHeatmap({ dataset: createDownloadsHeatmapDataset(), config })
+
+    expect(findHeatmapTranslation(calls, 'weekday_comparison')).toBeUndefined()
+    expect(findHeatmapTranslation(calls, 'excluded_days')?.named).toEqual({ count: '4' })
+  })
+
+  it('formats dates, weekday names, numbers and percentages using the selected locale', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({ $t: translate, locale: 'fr-FR' })
+
+    createAltTextFromDownloadsHeatmap({ dataset: createDownloadsHeatmapDataset(), config })
+
+    expect(findHeatmapTranslation(calls, 'peak')?.named).toEqual({
+      date: '13 mars 2026',
+      downloads: '60',
+    })
+    expect(findHeatmapTranslation(calls, 'busiest_weekday')?.named).toEqual({
+      weekday: 'vendredi',
+      average: '55',
+    })
+    expect(findHeatmapTranslation(calls, 'weekly_trend')?.named).toEqual({
+      change: new Intl.NumberFormat('fr-FR', {
+        style: 'percent',
+        maximumFractionDigits: 1,
+        signDisplay: 'exceptZero',
+      }).format(0.375),
+      first: '160',
+      last: '220',
+    })
+  })
+
+  it('ignores columns that have no corresponding week start', () => {
+    const { translate, calls } = createTranslateMock()
+    const config = createDownloadsHeatmapConfig({
+      $t: translate,
+      weekStarts: ['2026-03-01'],
+    })
+
+    createAltTextFromDownloadsHeatmap({ dataset: createDownloadsHeatmapDataset(), config })
+
+    expect(findHeatmapTranslation(calls, 'summary')?.named).toEqual({
+      total: '160',
+      average: '23',
+      days: '7',
+    })
+    expect(findHeatmapTranslation(calls, 'weekly_trend')).toBeUndefined()
+  })
+})
+
+describe('copyAltTextFromDownloadsHeatmap', () => {
+  it('copies the exact generated alternative text once', async () => {
+    const copy = vi.fn(async () => undefined)
+    const config = createDownloadsHeatmapConfig({ copy })
+    const dataset = createDownloadsHeatmapDataset()
+    const expected = createAltTextFromDownloadsHeatmap({ dataset, config })
+    await copyAltTextFromDownloadsHeatmap({ dataset, config })
+    expect(copy).toHaveBeenCalledTimes(1)
+    expect(copy).toHaveBeenCalledWith(expected)
+  })
+})
+
 describe('sanitise', () => {
   it('returns the same string when no sanitisation is needed', () => {
     expect(sanitise('nuxt-package')).toBe('nuxt-package')

From fa3579ee80842fd2da12d1d26dd680d3a667852e Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@gmail.com>
Date: Sun, 18 Oct 2026 15:01:54 +0000
Subject: [PATCH 24/26] perf: fetch abbreviated packument wherever possible
 (#3318)

Co-authored-by: Felix Schneider <99918022+trueberryless@users.noreply.github.com>
---
 .../api/registry/provenance/[...pkg].get.ts   |   2 +-
 .../[pkg]/.well-known/skills/[...skills].ts   |   2 +-
 server/routes/skills/[...pkg].get.ts          |   2 +-
 server/utils/dependency-analysis.ts           |   2 +-
 server/utils/dependency-resolver.ts           |  41 ++++-
 server/utils/npm.ts                           |  51 +++++-
 shared/types/npm-registry.ts                  |  33 ++++
 .../server/utils/dependency-resolver.spec.ts  | 167 ++++++++++++++----
 test/unit/server/utils/npm.spec.ts            |  55 ++++++
 9 files changed, 302 insertions(+), 53 deletions(-)
 create mode 100644 test/unit/server/utils/npm.spec.ts

diff --git a/server/api/registry/provenance/[...pkg].get.ts b/server/api/registry/provenance/[...pkg].get.ts
index 25ba429806..83860c500a 100644
--- a/server/api/registry/provenance/[...pkg].get.ts
+++ b/server/api/registry/provenance/[...pkg].get.ts
@@ -27,7 +27,7 @@ export default defineCachedEventHandler(
       }) as { packageName: string; version: string }
       const { packageName, version } = parsed
 
-      const packument = await fetchNpmPackage(packageName)
+      const packument = await fetchNpmPackageAbbreviated(packageName)
       const versionData = packument.versions[version]
       if (!versionData) {
         throw createError({
diff --git a/server/routes/[pkg]/.well-known/skills/[...skills].ts b/server/routes/[pkg]/.well-known/skills/[...skills].ts
index 93bed3e108..c5587732a1 100644
--- a/server/routes/[pkg]/.well-known/skills/[...skills].ts
+++ b/server/routes/[pkg]/.well-known/skills/[...skills].ts
@@ -17,7 +17,7 @@ export default defineCachedEventHandler(
       packageName: pkgPath,
       version: undefined,
     })
-    const packument = await fetchNpmPackage(validated.packageName)
+    const packument = await fetchNpmPackageAbbreviated(validated.packageName)
     const version = packument['dist-tags']?.latest
     if (!version) throw createError({ statusCode: 404, message: 'No latest version found' })
 
diff --git a/server/routes/skills/[...pkg].get.ts b/server/routes/skills/[...pkg].get.ts
index cc6de825c0..c51e92a214 100644
--- a/server/routes/skills/[...pkg].get.ts
+++ b/server/routes/skills/[...pkg].get.ts
@@ -38,7 +38,7 @@ export default defineCachedEventHandler(
       let version = validated.version
       let isVersioned = !!version
       if (!version) {
-        const packument = await fetchNpmPackage(validated.packageName)
+        const packument = await fetchNpmPackageAbbreviated(validated.packageName)
         version = packument['dist-tags']?.latest
         if (!version) {
           throw createError({ statusCode: 404, message: 'No latest version found' })
diff --git a/server/utils/dependency-analysis.ts b/server/utils/dependency-analysis.ts
index 8d6d142d9e..6af8a1a735 100644
--- a/server/utils/dependency-analysis.ts
+++ b/server/utils/dependency-analysis.ts
@@ -371,7 +371,7 @@ export async function analyzeDirectDependencyHealth(
     entries,
     async ([name, range]) => {
       try {
-        const packument = await fetchNpmPackage(name)
+        const packument = await fetchNpmPackageAbbreviated(name)
         const versions = Object.keys(packument.versions)
         const version = packument['dist-tags']?.[range] ?? resolveVersion(range, versions)
         if (!version) return null
diff --git a/server/utils/dependency-resolver.ts b/server/utils/dependency-resolver.ts
index 3b49ce6b49..b92135df16 100644
--- a/server/utils/dependency-resolver.ts
+++ b/server/utils/dependency-resolver.ts
@@ -15,12 +15,13 @@ export const TARGET_PLATFORM = {
 }
 
 /**
- * Fetch packument with caching (returns null on error for tree traversal).
- * Delegates to fetchNpmPackage() to share a single cache for all packument fetches.
+ * Fetch abbreviated packument metadata for tree traversal (returns null on error).
+ * Only install-relevant fields are needed here, so this uses the much smaller abbreviated
+ * document rather than the full packument.
  */
-async function fetchPackument(name: string): Promise<Packument | null> {
+async function fetchPackument(name: string): Promise<AbbreviatedPackument | null> {
   try {
-    return await fetchNpmPackage(name)
+    return await fetchNpmPackageAbbreviated(name)
   } catch (error) {
     if (import.meta.dev) {
       // oxlint-disable-next-line no-console -- log npm registry failures for debugging
@@ -30,11 +31,18 @@ async function fetchPackument(name: string): Promise<Packument | null> {
   }
 }
 
+/** The subset of version fields used to decide platform compatibility. */
+interface PlatformRestrictions {
+  os?: string[]
+  cpu?: string[]
+  libc?: string[]
+}
+
 /**
  * Check if a package version matches the target platform.
  * Returns false if the package explicitly excludes our target platform.
  */
-export function matchesPlatform(version: PackumentVersion): boolean {
+export function matchesPlatform(version: PlatformRestrictions): boolean {
   if (version.os && Array.isArray(version.os) && version.os.length > 0) {
     const osMatch = version.os.some(os => {
       if (os.startsWith('!')) return os.slice(1) !== TARGET_PLATFORM.os
@@ -51,7 +59,7 @@ export function matchesPlatform(version: PackumentVersion): boolean {
     if (!cpuMatch) return false
   }
 
-  const libc = (version as { libc?: string[] }).libc
+  const libc = version.libc
   if (libc && Array.isArray(libc) && libc.length > 0) {
     const libcMatch = libc.some(l => {
       if (l.startsWith('!')) return l.slice(1) !== TARGET_PLATFORM.libc
@@ -147,12 +155,29 @@ export async function resolveDependencyTree(
         const version = resolveVersion(range, versions)
         if (!version) return
 
-        const versionData = packument.versions[version]
+        let versionData = packument.versions[version]
         if (!versionData) return
 
+        // `os`/`cpu` come from the abbreviated metadata; reject mismatches before paying for
+        // the separate libc lookup.
+        if (!matchesPlatform({ os: versionData.os, cpu: versionData.cpu })) return
+
+        // The registry omits `libc` from abbreviated metadata, but it can still exclude a
+        // version (e.g. musl-only builds on a glibc target), so read it from the small
+        // single-version manifest.
+        if (versionData.libc === undefined && (versionData.os?.length || versionData.cpu?.length)) {
+          try {
+            const libc = await fetchNpmPackageVersionLibc(name, version)
+            if (libc) versionData = { ...versionData, libc }
+          } catch {
+            // libc lookup failed: skip optional deps, keep required ones.
+            if (optional) return
+          }
+        }
+
         if (!matchesPlatform(versionData)) return
 
-        const size = (versionData.dist as { unpackedSize?: number })?.unpackedSize ?? 0
+        const size = versionData.dist?.unpackedSize ?? 0
         const tarballUrl = versionData.dist?.tarball ?? ''
         const key = `${name}@${version}`
 
diff --git a/server/utils/npm.ts b/server/utils/npm.ts
index 1c4ba40d6e..8d26c9b527 100644
--- a/server/utils/npm.ts
+++ b/server/utils/npm.ts
@@ -13,6 +13,51 @@ export const fetchNpmPackage = defineCachedFunction(
   },
 )
 
+/** Registry media type for the abbreviated ("install") packument. */
+const NPM_INSTALL_V1 = 'application/vnd.npm.install-v1+json'
+
+/**
+ * Fetch abbreviated packument metadata — the much smaller document `npm install` uses.
+ * Only install-relevant fields are present; use `fetchNpmPackage` when full-document fields
+ * (time, license, readme, …) are needed. Kept in a separate cache namespace from
+ * `fetchNpmPackage` because the shapes differ.
+ */
+export const fetchNpmPackageAbbreviated = defineCachedFunction(
+  async (name: string): Promise<AbbreviatedPackument> => {
+    const encodedName = encodePackageName(name)
+    return await $fetch<AbbreviatedPackument>(`${NPM_REGISTRY}/${encodedName}`, {
+      headers: { accept: NPM_INSTALL_V1 },
+    })
+  },
+  {
+    maxAge: CACHE_MAX_AGE_FIVE_MINUTES,
+    swr: true,
+    name: 'npm-package-abbreviated',
+    getKey: (name: string) => name,
+  },
+)
+
+/**
+ * The registry omits `libc` from abbreviated metadata, so read it from a single version's
+ * manifest (small). Only needed for platform-restricted versions — e.g. to tell glibc and
+ * musl builds of the same os/cpu apart.
+ */
+export const fetchNpmPackageVersionLibc = defineCachedFunction(
+  async (name: string, version: string): Promise<string[] | undefined> => {
+    const encodedName = encodePackageName(name)
+    const manifest = await $fetch<{ libc?: string[] }>(
+      `${NPM_REGISTRY}/${encodedName}/${encodeURIComponent(version)}`,
+    )
+    return manifest.libc
+  },
+  {
+    maxAge: CACHE_MAX_AGE_ONE_DAY,
+    swr: true,
+    name: 'npm-version-libc',
+    getKey: (name: string, version: string) => `${name}@${version}`,
+  },
+)
+
 /**
  * Get the latest version of a package using fast-npm-meta API.
  * Falls back to full packument if fast-npm-meta fails.
@@ -24,9 +69,9 @@ export async function fetchLatestVersionWithFallback(name: string): Promise<stri
   const version = await fetchLatestVersion(name)
   if (version) return version
 
-  // Fallback to full packument (also cached)
+  // Fallback to abbreviated packument (also cached)
   try {
-    const packument = await fetchNpmPackage(name)
+    const packument = await fetchNpmPackageAbbreviated(name)
     return packument['dist-tags']?.latest ?? null
   } catch {
     return null
@@ -45,7 +90,7 @@ export async function resolveVersionConstraint(
   constraint: string,
 ): Promise<string | null> {
   try {
-    const packument = await fetchNpmPackage(packageName)
+    const packument = await fetchNpmPackageAbbreviated(packageName)
     const versions = Object.keys(packument.versions)
     return findMaxSatisfying(versions, constraint)
   } catch {
diff --git a/shared/types/npm-registry.ts b/shared/types/npm-registry.ts
index 8c09106968..c1192c3906 100644
--- a/shared/types/npm-registry.ts
+++ b/shared/types/npm-registry.ts
@@ -33,6 +33,39 @@ export type Packument = Omit<PackumentWithoutLicenseObjects, 'license' | 'versio
   versions: Record<string, PackumentVersion>
 }
 
+/**
+ * Abbreviated ("install") packument returned by the registry when requesting
+ * `Accept: application/vnd.npm.install-v1+json` — the much smaller document `npm install`
+ * consumes. It carries only install-relevant fields (versions, dist-tags, dependencies,
+ * os/cpu, dist, deprecated) and omits `time`, `readme`, `license`, `repository`, maintainers.
+ *
+ * Note: the registry omits `libc` from this document even though the full packument has it,
+ * so it must be fetched separately when needed (see `fetchNpmPackageVersionLibc`).
+ */
+export interface AbbreviatedPackument {
+  'name': string
+  'dist-tags'?: Record<string, string>
+  'modified'?: string
+  'versions': Record<string, AbbreviatedPackumentVersion>
+}
+
+export interface AbbreviatedPackumentVersion {
+  name?: string
+  version: string
+  dependencies?: Record<string, string>
+  optionalDependencies?: Record<string, string>
+  peerDependencies?: Record<string, string>
+  os?: string[]
+  cpu?: string[]
+  libc?: string[]
+  deprecated?: string
+  dist?: {
+    tarball?: string
+    unpackedSize?: number
+    [key: string]: unknown
+  }
+}
+
 /** Install scripts info (preinstall, install, postinstall) */
 export interface InstallScriptsInfo {
   scripts: ('preinstall' | 'install' | 'postinstall')[]
diff --git a/test/unit/server/utils/dependency-resolver.spec.ts b/test/unit/server/utils/dependency-resolver.spec.ts
index f1beaaaf2d..70b4bb3be8 100644
--- a/test/unit/server/utils/dependency-resolver.spec.ts
+++ b/test/unit/server/utils/dependency-resolver.spec.ts
@@ -1,18 +1,21 @@
 import { describe, expect, it, vi, beforeEach } from 'vitest'
-import type { Packument, PackumentVersion } from '#shared/types'
+import type { AbbreviatedPackument, AbbreviatedPackumentVersion } from '#shared/types'
 
 // Mock Nitro globals before importing the module
 vi.stubGlobal('defineCachedFunction', (fn: Function) => fn)
 vi.stubGlobal('$fetch', vi.fn())
 
-const mockFetchNpmPackage = vi.fn<(name: string) => Promise<Packument | null>>()
-vi.stubGlobal('fetchNpmPackage', mockFetchNpmPackage)
+const mockAbbreviatedPackument = vi.fn<(name: string) => Promise<AbbreviatedPackument | null>>()
+vi.stubGlobal('fetchNpmPackageAbbreviated', mockAbbreviatedPackument)
+
+const mockVersionLibc = vi.fn<(name: string, version: string) => Promise<string[] | undefined>>()
+vi.stubGlobal('fetchNpmPackageVersionLibc', mockVersionLibc)
 
 const { TARGET_PLATFORM, matchesPlatform, resolveVersion, resolveDependencyTree } =
   await import('#server/utils/dependency-resolver')
 
 /**
- * Helper to build a minimal Packument for mocking.
+ * Helper to build a minimal abbreviated packument for mocking.
  */
 function makePackument(
   name: string,
@@ -26,8 +29,8 @@ function makePackument(
     unpackedSize?: number
     deprecated?: string
   }>,
-): Packument {
-  const versionsMap: Record<string, PackumentVersion> = {}
+): AbbreviatedPackument {
+  const versionsMap: Record<string, AbbreviatedPackumentVersion> = {}
   for (const v of versions) {
     versionsMap[v.version] = {
       version: v.version,
@@ -35,12 +38,12 @@ function makePackument(
       optionalDependencies: v.optionalDeps,
       os: v.os,
       cpu: v.cpu,
-      ...(v.libc ? { libc: v.libc } : {}),
+      libc: v.libc,
       dist: { unpackedSize: v.unpackedSize },
       ...(v.deprecated ? { deprecated: v.deprecated } : {}),
-    } as unknown as PackumentVersion
+    }
   }
-  return { name, versions: versionsMap } as Packument
+  return { name, versions: versionsMap }
 }
 
 describe('dependency-resolver', () => {
@@ -56,61 +59,61 @@ describe('dependency-resolver', () => {
 
   describe('matchesPlatform', () => {
     it('returns true for packages without platform restrictions', () => {
-      const version = {} as PackumentVersion
+      const version = {}
       expect(matchesPlatform(version)).toBe(true)
     })
 
     it('returns true when os includes linux', () => {
-      const version = { os: ['linux', 'darwin'] } as PackumentVersion
+      const version = { os: ['linux', 'darwin'] }
       expect(matchesPlatform(version)).toBe(true)
     })
 
     it('returns false when os excludes linux', () => {
-      const version = { os: ['darwin', 'win32'] } as PackumentVersion
+      const version = { os: ['darwin', 'win32'] }
       expect(matchesPlatform(version)).toBe(false)
     })
 
     it('handles negated os values (!linux)', () => {
-      const version = { os: ['!win32'] } as PackumentVersion
+      const version = { os: ['!win32'] }
       expect(matchesPlatform(version)).toBe(true)
 
-      const excluded = { os: ['!linux'] } as PackumentVersion
+      const excluded = { os: ['!linux'] }
       expect(matchesPlatform(excluded)).toBe(false)
     })
 
     it('returns true when cpu includes x64', () => {
-      const version = { cpu: ['x64', 'arm64'] } as PackumentVersion
+      const version = { cpu: ['x64', 'arm64'] }
       expect(matchesPlatform(version)).toBe(true)
     })
 
     it('returns false when cpu excludes x64', () => {
-      const version = { cpu: ['arm64', 'arm'] } as PackumentVersion
+      const version = { cpu: ['arm64', 'arm'] }
       expect(matchesPlatform(version)).toBe(false)
     })
 
     it('handles negated cpu values (!x64)', () => {
-      const version = { cpu: ['!arm64'] } as PackumentVersion
+      const version = { cpu: ['!arm64'] }
       expect(matchesPlatform(version)).toBe(true)
 
-      const excluded = { cpu: ['!x64'] } as PackumentVersion
+      const excluded = { cpu: ['!x64'] }
       expect(matchesPlatform(excluded)).toBe(false)
     })
 
     it('returns true when libc includes glibc', () => {
-      const version = { libc: ['glibc'] } as unknown as PackumentVersion
+      const version = { libc: ['glibc'] }
       expect(matchesPlatform(version)).toBe(true)
     })
 
     it('returns false when libc is musl only', () => {
-      const version = { libc: ['musl'] } as unknown as PackumentVersion
+      const version = { libc: ['musl'] }
       expect(matchesPlatform(version)).toBe(false)
     })
 
     it('handles negated libc values (!glibc)', () => {
-      const version = { libc: ['!musl'] } as unknown as PackumentVersion
+      const version = { libc: ['!musl'] }
       expect(matchesPlatform(version)).toBe(true)
 
-      const excluded = { libc: ['!glibc'] } as unknown as PackumentVersion
+      const excluded = { libc: ['!glibc'] }
       expect(matchesPlatform(excluded)).toBe(false)
     })
 
@@ -118,12 +121,12 @@ describe('dependency-resolver', () => {
       const version = {
         os: ['linux'],
         cpu: ['arm64'], // doesn't match x64
-      } as PackumentVersion
+      }
       expect(matchesPlatform(version)).toBe(false)
     })
 
     it('ignores empty arrays', () => {
-      const version = { os: [], cpu: [], libc: [] } as unknown as PackumentVersion
+      const version = { os: [], cpu: [], libc: [] }
       expect(matchesPlatform(version)).toBe(true)
     })
   })
@@ -187,11 +190,13 @@ describe('dependency-resolver', () => {
 
   describe('resolveDependencyTree', () => {
     beforeEach(() => {
-      mockFetchNpmPackage.mockReset()
+      mockAbbreviatedPackument.mockReset()
+      mockVersionLibc.mockReset()
+      mockVersionLibc.mockResolvedValue(undefined)
     })
 
     it('resolves a single package with no dependencies', async () => {
-      mockFetchNpmPackage.mockResolvedValue(
+      mockAbbreviatedPackument.mockResolvedValue(
         makePackument('root', [{ version: '1.0.0', unpackedSize: 5000 }]),
       )
 
@@ -209,7 +214,7 @@ describe('dependency-resolver', () => {
     })
 
     it('resolves direct dependencies', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [
             {
@@ -244,7 +249,7 @@ describe('dependency-resolver', () => {
     })
 
     it('resolves transitive dependencies (A → B → C)', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'a') return makePackument('a', [{ version: '1.0.0', deps: { b: '^1.0.0' } }])
         if (name === 'b') return makePackument('b', [{ version: '1.0.0', deps: { c: '^1.0.0' } }])
         if (name === 'c') return makePackument('c', [{ version: '1.0.0' }])
@@ -260,7 +265,7 @@ describe('dependency-resolver', () => {
     })
 
     it('handles circular dependencies without infinite loop', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'a') return makePackument('a', [{ version: '1.0.0', deps: { b: '^1.0.0' } }])
         if (name === 'b') return makePackument('b', [{ version: '1.0.0', deps: { a: '^1.0.0' } }])
         return null
@@ -274,7 +279,7 @@ describe('dependency-resolver', () => {
     })
 
     it('marks optional dependencies with optional: true', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [
             { version: '1.0.0', optionalDeps: { 'opt-dep': '^1.0.0' } },
@@ -291,7 +296,7 @@ describe('dependency-resolver', () => {
     })
 
     it('skips dependencies that do not match the target platform', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [
             { version: '1.0.0', deps: { 'darwin-only': '^1.0.0', 'linux-ok': '^1.0.0' } },
@@ -309,8 +314,94 @@ describe('dependency-resolver', () => {
       expect(result.has('linux-ok@1.0.0')).toBe(true)
     })
 
+    it('uses per-version libc to distinguish platform builds (glibc vs musl)', async () => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
+        if (name === 'root')
+          return makePackument('root', [
+            {
+              version: '1.0.0',
+              optionalDeps: { 'native-gnu': '^1.0.0', 'native-musl': '^1.0.0' },
+            },
+          ])
+        if (name === 'native-gnu')
+          return makePackument('native-gnu', [
+            { version: '1.0.0', os: ['linux'], cpu: ['x64'], unpackedSize: 100 },
+          ])
+        if (name === 'native-musl')
+          return makePackument('native-musl', [
+            { version: '1.0.0', os: ['linux'], cpu: ['x64'], unpackedSize: 200 },
+          ])
+        return null
+      })
+      // Abbreviated metadata omits `libc`, so it comes from the per-version manifest.
+      mockVersionLibc.mockImplementation(async (name: string) =>
+        name === 'native-gnu' ? ['glibc'] : ['musl'],
+      )
+
+      const result = await resolveDependencyTree('root', '1.0.0')
+
+      expect(result.has('native-gnu@1.0.0')).toBe(true)
+      expect(result.has('native-musl@1.0.0')).toBe(false)
+    })
+
+    it('does not fetch libc for versions without platform restrictions', async () => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
+        if (name === 'root')
+          return makePackument('root', [{ version: '1.0.0', deps: { plain: '^1.0.0' } }])
+        if (name === 'plain') return makePackument('plain', [{ version: '1.0.0' }])
+        return null
+      })
+
+      await resolveDependencyTree('root', '1.0.0')
+
+      expect(mockVersionLibc).not.toHaveBeenCalled()
+    })
+
+    it('keeps required deps but skips optional ones when the libc lookup fails', async () => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
+        if (name === 'root')
+          return makePackument('root', [
+            {
+              version: '1.0.0',
+              deps: { 'linux-required': '^1.0.0' },
+              optionalDeps: { 'linux-optional': '^1.0.0' },
+            },
+          ])
+        if (name === 'linux-required')
+          return makePackument('linux-required', [{ version: '1.0.0', os: ['linux'] }])
+        if (name === 'linux-optional')
+          return makePackument('linux-optional', [{ version: '1.0.0', os: ['linux'] }])
+        return null
+      })
+      mockVersionLibc.mockRejectedValue(new Error('registry unavailable'))
+
+      const result = await resolveDependencyTree('root', '1.0.0')
+
+      // npm installs or fails on a required dep, so it must not silently vanish (with its vulns).
+      expect(result.has('linux-required@1.0.0')).toBe(true)
+      // An unknown libc could be the incompatible build, so optional deps are skipped.
+      expect(result.has('linux-optional@1.0.0')).toBe(false)
+    })
+
+    it('does not fetch libc when os/cpu already exclude the target platform', async () => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
+        if (name === 'root')
+          return makePackument('root', [{ version: '1.0.0', deps: { 'darwin-only': '^1.0.0' } }])
+        if (name === 'darwin-only')
+          return makePackument('darwin-only', [
+            { version: '1.0.0', os: ['darwin'], cpu: ['arm64'] },
+          ])
+        return null
+      })
+
+      const result = await resolveDependencyTree('root', '1.0.0')
+
+      expect(result.has('darwin-only@1.0.0')).toBe(false)
+      expect(mockVersionLibc).not.toHaveBeenCalled()
+    })
+
     it('skips dependencies with unresolvable version ranges', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [{ version: '1.0.0', deps: { missing: '^99.0.0' } }])
         if (name === 'missing') return makePackument('missing', [{ version: '1.0.0' }])
@@ -324,7 +415,7 @@ describe('dependency-resolver', () => {
     })
 
     it('continues resolving when fetchPackument fails for a dependency', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [
             { version: '1.0.0', deps: { broken: '^1.0.0', healthy: '^1.0.0' } },
@@ -343,7 +434,7 @@ describe('dependency-resolver', () => {
     })
 
     it('assigns depth and path when trackDepth is enabled', async () => {
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [{ version: '1.0.0', deps: { mid: '^1.0.0' } }])
         if (name === 'mid')
@@ -369,7 +460,7 @@ describe('dependency-resolver', () => {
     })
 
     it('does not include depth/path when trackDepth is not enabled', async () => {
-      mockFetchNpmPackage.mockResolvedValue(makePackument('root', [{ version: '1.0.0' }]))
+      mockAbbreviatedPackument.mockResolvedValue(makePackument('root', [{ version: '1.0.0' }]))
 
       const result = await resolveDependencyTree('root', '1.0.0')
 
@@ -379,7 +470,7 @@ describe('dependency-resolver', () => {
     })
 
     it('includes deprecated field on deprecated versions', async () => {
-      mockFetchNpmPackage.mockResolvedValue(
+      mockAbbreviatedPackument.mockResolvedValue(
         makePackument('root', [{ version: '1.0.0', deprecated: 'Use v2 instead' }]),
       )
 
@@ -389,7 +480,7 @@ describe('dependency-resolver', () => {
     })
 
     it('defaults size to 0 when unpackedSize is missing', async () => {
-      mockFetchNpmPackage.mockResolvedValue(makePackument('root', [{ version: '1.0.0' }]))
+      mockAbbreviatedPackument.mockResolvedValue(makePackument('root', [{ version: '1.0.0' }]))
 
       const result = await resolveDependencyTree('root', '1.0.0')
 
@@ -398,7 +489,7 @@ describe('dependency-resolver', () => {
 
     it('deduplicates the same name@version appearing via multiple paths', async () => {
       // root → a, root → b, both a and b depend on shared@1.0.0
-      mockFetchNpmPackage.mockImplementation(async (name: string) => {
+      mockAbbreviatedPackument.mockImplementation(async (name: string) => {
         if (name === 'root')
           return makePackument('root', [{ version: '1.0.0', deps: { a: '^1.0.0', b: '^1.0.0' } }])
         if (name === 'a')
diff --git a/test/unit/server/utils/npm.spec.ts b/test/unit/server/utils/npm.spec.ts
new file mode 100644
index 0000000000..1ac4ef2f16
--- /dev/null
+++ b/test/unit/server/utils/npm.spec.ts
@@ -0,0 +1,55 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest'
+
+// Mock Nitro globals before importing the module under test
+vi.stubGlobal('defineCachedFunction', (fn: Function) => fn)
+const $fetchMock = vi.fn()
+vi.stubGlobal('$fetch', $fetchMock)
+vi.stubGlobal('encodePackageName', (name: string) => name.replace('/', '%2F'))
+vi.stubGlobal('NPM_REGISTRY', 'https://registry.npmjs.org')
+vi.stubGlobal('CACHE_MAX_AGE_FIVE_MINUTES', 300)
+vi.stubGlobal('CACHE_MAX_AGE_ONE_DAY', 86400)
+vi.stubGlobal('fetchLatestVersion', vi.fn())
+
+const { fetchNpmPackageAbbreviated, fetchNpmPackageVersionLibc } = await import('#server/utils/npm')
+
+describe('fetchNpmPackageAbbreviated', () => {
+  beforeEach(() => {
+    $fetchMock.mockReset()
+  })
+
+  it('requests the abbreviated ("install") metadata', async () => {
+    const doc = { name: 'pkg', versions: { '1.0.0': { version: '1.0.0' } } }
+    $fetchMock.mockResolvedValue(doc)
+
+    const result = await fetchNpmPackageAbbreviated('@scope/pkg')
+
+    expect(result).toBe(doc)
+    expect($fetchMock).toHaveBeenCalledWith(
+      'https://registry.npmjs.org/@scope%2Fpkg',
+      expect.objectContaining({
+        headers: { accept: 'application/vnd.npm.install-v1+json' },
+      }),
+    )
+  })
+})
+
+describe('fetchNpmPackageVersionLibc', () => {
+  beforeEach(() => {
+    $fetchMock.mockReset()
+  })
+
+  it('reads libc from the single-version manifest', async () => {
+    $fetchMock.mockResolvedValue({ libc: ['glibc'] })
+
+    const libc = await fetchNpmPackageVersionLibc('@scope/pkg', '1.2.3')
+
+    expect(libc).toEqual(['glibc'])
+    expect($fetchMock).toHaveBeenCalledWith('https://registry.npmjs.org/@scope%2Fpkg/1.2.3')
+  })
+
+  it('returns undefined when the manifest has no libc', async () => {
+    $fetchMock.mockResolvedValue({})
+
+    expect(await fetchNpmPackageVersionLibc('pkg', '1.0.0')).toBeUndefined()
+  })
+})

From 73b6c4dcad90f8e20177194ae701e2f92f558768 Mon Sep 17 00:00:00 2001
From: Philippe Serhal <philippe.serhal@gmail.com>
Date: Sun, 18 Oct 2026 15:02:06 +0000
Subject: [PATCH 25/26] fix: allow relative paths in fetch cache allow list
 check (#3325)

Co-authored-by: Felix Schneider <99918022+trueberryless@users.noreply.github.com>
---
 server/plugins/fetch-cache.ts                 |  10 +-
 shared/utils/fetch-cache-config.ts            |  28 +++++
 test/unit/server/plugins/fetch-cache.spec.ts  | 105 ++++++++++++++++++
 .../shared/utils/fetch-cache-config.spec.ts   |  68 ++++++++++++
 4 files changed, 209 insertions(+), 2 deletions(-)
 create mode 100644 test/unit/server/plugins/fetch-cache.spec.ts
 create mode 100644 test/unit/shared/utils/fetch-cache-config.spec.ts

diff --git a/server/plugins/fetch-cache.ts b/server/plugins/fetch-cache.ts
index 74db66d770..19214e9385 100644
--- a/server/plugins/fetch-cache.ts
+++ b/server/plugins/fetch-cache.ts
@@ -7,6 +7,7 @@ import {
   FETCH_CACHE_VERSION,
   isAllowedDomain,
   isCacheEntryStale,
+  resolveRequestUrl,
 } from '#shared/utils/fetch-cache-config'
 
 /**
@@ -64,14 +65,19 @@ export default defineNitroPlugin(nitroApp => {
       options: Parameters<typeof $fetch>[1] = {},
       ttl: number = FETCH_CACHE_DEFAULT_TTL,
     ): Promise<CachedFetchResult<T>> => {
+      // Resolve the (possibly relative) request URL against `baseURL` so the allowlist check
+      // and cache key operate on the real host. Callers like `$npmRegistry`/`$npmApi` pass a
+      // relative path plus a `baseURL`, which `isAllowedDomain` can't parse on its own.
+      const absoluteUrl = resolveRequestUrl(url, options)
+
       // Check if this URL should be cached
-      if (!isAllowedDomain(url)) {
+      if (!absoluteUrl || !isAllowedDomain(absoluteUrl)) {
         const data = (await $fetch(url, options)) as T
         return { data, isStale: false, cachedAt: null }
       }
 
       const method = options.method || 'GET'
-      const cacheKey = generateFetchCacheKey(url, method, options.body)
+      const cacheKey = generateFetchCacheKey(absoluteUrl, method, options.body)
 
       // Try to get cached response (with error handling for storage failures)
       let cached: CachedFetchEntry<T> | null = null
diff --git a/shared/utils/fetch-cache-config.ts b/shared/utils/fetch-cache-config.ts
index 94d0fea56f..1d70b90f9b 100644
--- a/shared/utils/fetch-cache-config.ts
+++ b/shared/utils/fetch-cache-config.ts
@@ -5,6 +5,8 @@
  * using Nitro's storage layer (backed by Vercel's runtime cache in production).
  */
 
+import type { FetchOptions } from 'ofetch'
+import { withBase, withQuery } from 'ufo'
 import {
   CONSTELLATION_HOST,
   LIKES_LEADERBOARD_API_URL,
@@ -70,6 +72,32 @@ export function isAllowedDomain(url: string | URL): boolean {
   }
 }
 
+/**
+ * Resolve a request URL to the absolute URL `$fetch` will request, so cache decisions are made
+ * on the real host and the cache key covers the full path and query.
+ *
+ * Callers may pass a relative path together with a `baseURL` option (e.g. `$npmRegistry`,
+ * `$npmApi`). `isAllowedDomain`/cache keys need the resolved absolute URL — a bare relative
+ * path can't be parsed and would otherwise be treated as not-cacheable.
+ *
+ * This mirrors ofetch: `params` and `query` are merged, then `withBase` and `withQuery` are
+ * applied. `new URL(url, baseURL)` would drop a path in `baseURL` and is not equivalent.
+ */
+export function resolveRequestUrl(
+  url: string,
+  options: Pick<FetchOptions, 'baseURL' | 'params' | 'query'> = {},
+): URL | null {
+  const { baseURL, params, query } = options
+  const joined = baseURL ? withBase(url, baseURL) : url
+  const request = params || query ? withQuery(joined, { ...params, ...query }) : joined
+
+  try {
+    return new URL(request)
+  } catch {
+    return null
+  }
+}
+
 /**
  * Structure of a cached fetch entry stored in Nitro storage.
  */
diff --git a/test/unit/server/plugins/fetch-cache.spec.ts b/test/unit/server/plugins/fetch-cache.spec.ts
new file mode 100644
index 0000000000..cfe706b22a
--- /dev/null
+++ b/test/unit/server/plugins/fetch-cache.spec.ts
@@ -0,0 +1,105 @@
+import { afterAll, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const { fetchMock } = vi.hoisted(() => ({ fetchMock: vi.fn() }))
+vi.mock('ofetch', () => ({ $fetch: fetchMock }))
+
+vi.stubGlobal('defineNitroPlugin', (setup: Function) => setup)
+
+const plugin = (await import('#server/plugins/fetch-cache')).default
+
+type CachedFetch = (
+  url: string,
+  options?: { baseURL?: string; query?: Record<string, string> },
+) => Promise<{ data: unknown }>
+
+/**
+ * Boots the plugin with a fresh in-memory storage and returns that storage plus a
+ * request-scoped cachedFetch. Everything mutable lives here, per test invocation.
+ */
+function bootstrap() {
+  const store = new Map<string, unknown>()
+  const storage = {
+    getItem: vi.fn(async (key: string) => store.get(key) ?? null),
+    setItem: vi.fn(async (key: string, value: unknown) => {
+      store.set(key, value)
+    }),
+  }
+  vi.stubGlobal('useStorage', () => storage)
+
+  let requestHook: ((event: unknown) => void) | undefined
+  plugin({
+    hooks: {
+      hook: (name: string, fn: (event: unknown) => void) => {
+        if (name === 'request') requestHook = fn
+      },
+    },
+  } as never)
+
+  const cachedFetch: CachedFetch = (url, options) => {
+    const event = { context: {} as { cachedFetch?: CachedFetch }, waitUntil: () => {} }
+    requestHook!(event)
+    return event.context.cachedFetch!(url, options)
+  }
+
+  return { storage, cachedFetch }
+}
+
+afterAll(() => {
+  vi.unstubAllGlobals()
+})
+
+describe('fetch-cache plugin', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    fetchMock.mockResolvedValue({ name: 'vite' })
+  })
+
+  it('caches a relative request when baseURL resolves to an allowlisted host', async () => {
+    const { storage, cachedFetch } = bootstrap()
+    const result = await cachedFetch('/vite', { baseURL: 'https://registry.npmjs.org' })
+
+    expect(fetchMock).toHaveBeenCalledWith('/vite', { baseURL: 'https://registry.npmjs.org' })
+    expect(result.data).toEqual({ name: 'vite' })
+    expect(storage.setItem).toHaveBeenCalledTimes(1)
+
+    const key = storage.setItem.mock.calls[0]![0]
+    expect(key).toContain('registry.npmjs.org')
+    expect(key).toContain('/vite')
+  })
+
+  it('serves a fresh cached entry without re-fetching', async () => {
+    const { cachedFetch } = bootstrap()
+    await cachedFetch('/vite', { baseURL: 'https://registry.npmjs.org' })
+    const result = await cachedFetch('/vite', { baseURL: 'https://registry.npmjs.org' })
+
+    expect(fetchMock).toHaveBeenCalledTimes(1)
+    expect(result.data).toEqual({ name: 'vite' })
+  })
+
+  it('uses separate cache entries for requests that differ only in query options', async () => {
+    const { cachedFetch } = bootstrap()
+    const baseURL = 'https://registry.npmjs.org'
+    fetchMock.mockResolvedValueOnce({ name: 'vue' }).mockResolvedValueOnce({ name: 'react' })
+
+    await cachedFetch('/-/v1/search', { baseURL, query: { text: 'vue' } })
+    const result = await cachedFetch('/-/v1/search', { baseURL, query: { text: 'react' } })
+
+    expect(fetchMock).toHaveBeenCalledTimes(2)
+    expect(result.data).toEqual({ name: 'react' })
+  })
+
+  it('does not cache when the URL cannot be resolved (no baseURL)', async () => {
+    const { storage, cachedFetch } = bootstrap()
+    await cachedFetch('/vite')
+
+    expect(fetchMock).toHaveBeenCalledTimes(1)
+    expect(storage.setItem).not.toHaveBeenCalled()
+  })
+
+  it('does not cache a non-allowlisted host', async () => {
+    const { storage, cachedFetch } = bootstrap()
+    await cachedFetch('/vite', { baseURL: 'https://example.com' })
+
+    expect(storage.setItem).not.toHaveBeenCalled()
+  })
+})
diff --git a/test/unit/shared/utils/fetch-cache-config.spec.ts b/test/unit/shared/utils/fetch-cache-config.spec.ts
new file mode 100644
index 0000000000..adac1dad4a
--- /dev/null
+++ b/test/unit/shared/utils/fetch-cache-config.spec.ts
@@ -0,0 +1,68 @@
+import { describe, expect, it } from 'vitest'
+import {
+  FETCH_CACHE_ALLOWED_DOMAINS,
+  isAllowedDomain,
+  resolveRequestUrl,
+} from '#shared/utils/fetch-cache-config'
+
+describe('resolveRequestUrl', () => {
+  it('passes through absolute URLs', () => {
+    expect(resolveRequestUrl('https://registry.npmjs.org/vite')?.href).toBe(
+      'https://registry.npmjs.org/vite',
+    )
+  })
+
+  it('resolves a relative path against baseURL', () => {
+    expect(resolveRequestUrl('/vite', { baseURL: 'https://registry.npmjs.org' })?.href).toBe(
+      'https://registry.npmjs.org/vite',
+    )
+  })
+
+  it('keeps the baseURL path, matching how ofetch joins them', () => {
+    expect(
+      resolveRequestUrl('/point/last-week/vite', { baseURL: 'https://api.npmjs.org/downloads' })
+        ?.href,
+    ).toBe('https://api.npmjs.org/downloads/point/last-week/vite')
+  })
+
+  it('does not treat a protocol-relative path as a different host', () => {
+    expect(
+      resolveRequestUrl('//example.com/vite', { baseURL: 'https://registry.npmjs.org' })?.host,
+    ).toBe('registry.npmjs.org')
+  })
+
+  it('leaves an existing query string untouched when no query options are given', () => {
+    expect(
+      resolveRequestUrl('/-/v1/search?text=maintainer%3Afoo&q=a%20b', {
+        baseURL: 'https://registry.npmjs.org',
+      })?.href,
+    ).toBe('https://registry.npmjs.org/-/v1/search?text=maintainer%3Afoo&q=a%20b')
+  })
+
+  it('appends params and query options to the URL', () => {
+    expect(
+      resolveRequestUrl('/-/v1/search?size=25', {
+        baseURL: 'https://registry.npmjs.org',
+        params: { text: 'vue' },
+        query: { from: 25 },
+      })?.href,
+    ).toBe('https://registry.npmjs.org/-/v1/search?size=25&text=vue&from=25')
+  })
+
+  it('returns null for a relative path with no baseURL', () => {
+    expect(resolveRequestUrl('/vite')).toBeNull()
+  })
+})
+
+describe('isAllowedDomain after resolving', () => {
+  it('allows a relative registry request once resolved against baseURL', () => {
+    const resolved = resolveRequestUrl('/vite', { baseURL: 'https://registry.npmjs.org' })
+    expect(resolved).not.toBeNull()
+    expect(isAllowedDomain(resolved!)).toBe(true)
+  })
+
+  it('includes the npm registry and rejects unknown hosts', () => {
+    expect(FETCH_CACHE_ALLOWED_DOMAINS).toContain('registry.npmjs.org')
+    expect(isAllowedDomain('https://example.com/foo')).toBe(false)
+  })
+})

From cf9886694ab3c72a896b48dc06300ee383c05a0d Mon Sep 17 00:00:00 2001
From: "autofix-ci[bot]" <114827586+autofix-ci[bot]@users.noreply.github.com>
Date: Mon, 19 Oct 2026 08:27:17 +0000
Subject: [PATCH 26/26] [autofix.ci] apply automated fixes

---
 i18n/locales/uk-UA.json | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/i18n/locales/uk-UA.json b/i18n/locales/uk-UA.json
index d25ab33873..9351e48441 100644
--- a/i18n/locales/uk-UA.json
+++ b/i18n/locales/uk-UA.json
@@ -840,6 +840,10 @@
       "sparkline_zoom_reset": {
         "title": "Скинути масштаб · двічі клацніть діаграму або натисніть Esc",
         "aria_label": "Скинути масштаб"
+      },
+      "downloads_heatmap": {
+        "legend": {},
+        "copy_alt": {}
       }
     },
     "downloads": {
@@ -1931,8 +1935,8 @@
       "p1": "На жаль, не вдалося завантажити журнал змін для {package}",
       "p2": "Спробуйте пізніше або {viewon}"
     },
-    "rate_limit_ungh": "Вибачте, досягнуто обмеження кількості запитів до GitHub. Спробуйте ще раз через деякий час.",
     "version_unavailable": "Запитана версія недоступна.",
-    "copy_as_markdown": "Копіювати журнал змін як Markdown"
+    "copy_as_markdown": "Копіювати журнал змін як Markdown",
+    "ungh": {}
   }
 }