Daily Org Oversight Report — 2026-03-17 (UTC)

[fro-bot]

Summary Metrics

Metric	Count
Open Issues	20
Open PRs	12
Stale Issues (>30 days)	2
Stale PRs (>14 days)	0
Security Alerts	26

---

Critical Items

Security Alerts

fro-bot/.github —7 Dependabot Alerts

Severity	Dependency	Count	Link
High	undici	4	View
High	flatted	1	View
Medium	undici	2	View

Action: Review and mergePR #2993 (security overrides for undici and flatted).

fro-bot/agent — 19 CodeQL Alerts

Severity	Rule	Count
High	Token-Permissions	6
High	js/file-system-race	2
High	js/weak-cryptographic-algorithm	2
High	Vulnerabilities	1
High	Maintained	1
High	Code-Review	1
High	Branch-Protection	1
Medium	SAST	1
Medium	Pinned-Dependencies	1
Medium	Fuzzing	1
Low	CII-Best-Practices	1

Action: Review CodeQL alerts and address high-priority items.

---

Aging PRs (No Activity >7 Days)

None. All open PRs have recent activity.

---

Stale Issues (No Activity >30 Days)

Repo	Issue	Created	Days Since Activity	Recommended Action
fro-bot/systematic	#1: Enable code scanning	2026-03-09	8	Add labels, assign owner, or close if resolved
fro-bot/fro-bot.github.io	#1: Enable code scanning	2026-03-09	8	Add labels, assign owner, or close if resolved

---

Unassigned Bugs / High-Signal Issues

Repo	Issue	Labels	Status
fro-bot/systematic	#1: Enable code scanning	None	Needs triage
fro-bot/fro-bot.github.io	#1: Enable code scanning	None	Needs triage

---

Repo Hotspots (Top 3 by Open PRs / Stale Items)

1. fro-bot/agent —7 open PRs, 19 code scanning alerts
2. fro-bot/.github — 5 open PRs, 7 Dependabot alerts
3. fro-bot/systematic — 0 open PRs, 1 stale issue

---

Recommended Actions

• fro-bot/.github: Merge PR fix(deps): add security overrides for undici and flatted #2993 to address undici/flatted security vulnerabilities
• fro-bot/agent: Triage and address high-severity CodeQL alerts (Token-Permissions, file-system-race, weak-cryptographic-algorithm)
• fro-bot/systematic: Assign owner and add labels to issue feat: set default settings #1
• fro-bot/fro-bot.github.io: Assign owner and add labels to issue feat: set default settings #1
• fro-bot/agent: Review pending Renovate PRs (Action Required: Fix Renovate Configuration #316 major, Action Required: Fix Renovate Configuration #315, Action Required: Fix Renovate Configuration #314, Action Required: Fix Renovate Configuration #313, Action Required: Fix Renovate Configuration #312, Action Required: Fix Renovate Configuration #311)
• fro-bot/.github: Review pending Renovate PRs (chore(deps): update GitHub Actions #3000, chore(dev): update dependency @types/node to v24.12.0 #2997, chore(deps): update bfra-me/.github to v4.13.6 #2991, chore(deps): update pnpm to v10.32.1 #2988)

---

Run Summary

Field	Value
Event	schedule
Repository	fro-bot/.github
Run ID	23175754500
Cache	hit
Session	ses_3065a207effembFgDP3q2jkC27