Issues

• [discussion] Add @f-o-t/excel — browser-compatible Excel (XLSX) generation

  F-O-T/libraries#28 · Filter by author Yorizel opened on Mar 1, 2026

• [react-hooks] New library: @f-o-t/react-hooks — SSR-safe hooks mirroring usehooks with full unit test coverage

  enhancement
  F-O-T/libraries#27 · Filter by author Yorizel opened on Feb 21, 2026
  4

• [crypto/digital-certificate] Missing test coverage for special-char passwords — legacy PBE path untested + silent BMPString corruption for supplementary chars

  bug
  F-O-T/libraries#23 · Filter by author Yorizel opened on Feb 18, 2026
  

• [e-signature] Text overflow in signature box — drawCertInfo has no lower-bound clipping

  bug
  F-O-T/libraries#21 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] TimeStampReq has no nonce — timestamp responses can be replayed

  enhancement
  F-O-T/libraries#20 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] QR code hashes unsigned PDF bytes — doesn't represent the final signed document

  enhancement
  F-O-T/libraries#19 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] QR code verification URL uses 8-byte truncated SHA-256 — insufficient entropy for document identification

  enhancement
  F-O-T/libraries#18 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Visual signature date/time shows system clock, not certified TSA timestamp time

  enhancement
  F-O-T/libraries#17 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Race condition in ICP-Brasil policy cache — concurrent calls trigger multiple downloads

  enhancement
  F-O-T/libraries#16 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Shallow spread in batch signing can silently drop certificate.p12 from base options

  bug
  F-O-T/libraries#15 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] SignatureAppearance x/y accept negative values — off-page placement not validated

  bug
  F-O-T/libraries#14 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Schema allows timestamp:true without tsaUrl — missing cross-field validation

  bug
  F-O-T/libraries#13 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] No response size limit on TSA and policy fetches — potential OOM on hostile/malformed responses

  bug
  F-O-T/libraries#12 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Policy document fetch has no timeout — signPdf can hang indefinitely with pades-icp-brasil

  bug
  F-O-T/libraries#11 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Negative QR code size when signature height < 20 — corrupt PDF output

  bug
  F-O-T/libraries#10 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] SignatureAppearance.y docstring says 'from bottom' but code treats it as 'from top'

  bugdocumentation
  F-O-T/libraries#9 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] timestamp:true without tsaUrl silently skips timestamping — onTimestampError never called

  bug
  F-O-T/libraries#8 · Filter by author Yorizel opened on Feb 18, 2026

• [e-signature] Timestamp covers full CMS SignedData instead of SignerInfo.signature — PAdES-T non-conformant

  bug
  F-O-T/libraries#7 · Filter by author Yorizel opened on Feb 18, 2026