MapGap has published a security-hardened fork branch at https://github.com/evcatalyst/kepler.gl/tree/mapgap-v3-security based on commit 73af58e. The verified series covers: D3 advisory-safe majors; Thrift 0.23 and node-fetch 2.7; replacement of react-palm with a framework-neutral task runtime; Lodash 4.18.1; editable/deck/luma 9.3 alignment; React Intl 7; and a true ESM components entry. Evidence: 11,386 Node assertions pass, and the packed npm production graph audits with zero findings. We plan to submit these as narrow PRs rather than a monolith. Patch ledger and reproduction details: https://github.com/evcatalyst/mapgap/tree/codex/v3-public-fork-release/fork/kepler-gl
MapGap has published a security-hardened fork branch at https://github.com/evcatalyst/kepler.gl/tree/mapgap-v3-security based on commit 73af58e. The verified series covers: D3 advisory-safe majors; Thrift 0.23 and node-fetch 2.7; replacement of react-palm with a framework-neutral task runtime; Lodash 4.18.1; editable/deck/luma 9.3 alignment; React Intl 7; and a true ESM components entry. Evidence: 11,386 Node assertions pass, and the packed npm production graph audits with zero findings. We plan to submit these as narrow PRs rather than a monolith. Patch ledger and reproduction details: https://github.com/evcatalyst/mapgap/tree/codex/v3-public-fork-release/fork/kepler-gl