| Age | Commit message (Expand) | Author | Lines |
| Load auth libraries only when a request needs one | Bryce Kwon | -0/+13 |
| Spend a missing account's login on a real hash | Bryce Kwon | -36/+51 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -0/+22 |
| Read the auth cookie in linear time | Bryce Kwon | -0/+10 |
| Refuse every repository when auth-file loses repos | Bryce Kwon | -0/+13 |
| Clean up the whole tree | Bryce Kwon | -62/+31 |
| Add a test suite for the shipped extensions | Bryce Kwon | -0/+302 |