mirror of
https://github.com/Comfy-Org/ComfyUI_frontend.git
synced 2026-05-22 21:38:52 +00:00
Merges three pass-3 staging sources via scripts/merge-staging-pass3.py:
R8 (clone-grep top-20 ecosystem packs) — 887 raw rows, 380 deduped
R9.security — 3 NEW S16.* dynamic-code patterns
R9.cookiecutter / R9.guides — sanctioned-public surface evidence
Rollup re-ranked. Notable shifts:
rank pattern ★sum occ
1 S6.A1 graphToPrompt monkey-patching ⚠️ CRITICAL 23,604 15
2 S2.N15 prototype.serialize replacement 5,996 12
3 S11.G2 graph add/remove/findNodesByType 21,086 12
4 S11.G3 beforeChange/afterChange batching 18,973 13
5 S7.G1 window.LiteGraph globals as ABI 18,853 14
6 S6.A4 app.queuePrompt patching 3,464 11
7 S10.D1 dynamic addInput/Output 5,287 11
8 S10.D2 node.connect/disconnect programmatic 18,643 14
9 S4.W4 widget.options.values mutation 7,985 11
10 S2.N16 node.widgets array access 7,086 13
S11.G3 (beforeChange batching) and S7.G1 (window globals) entered top-5 —
both drive the v2 'three orthogonal capabilities' thesis: batched mutations,
typed import deprecation path.
3 NEW S16.* patterns from security scan:
S16.D1 SVG with onload/onerror (XSS-equivalent dynamic JS)
S16.D3 obfuscated string-replace pipeline
S16.D7 Python web/ template uses exec/eval to emit JS
star-cache: 105 → 119 starred repos (added Acly, ssitu, cubiq, Fannovel16,
WASasquatch, Crystools, cg-use-everywhere, mikey_nodes, etc. — actual
top-20 ecosystem heavyweights now represented).