We rebuilt the foundation of hub.lightchain.ai — the dApp catalogue is now properly documented, properly secured, and properly contributable.
GitHub - lightchain-protocol/lcai-dApp-hub · GitHub
PR: docs+fix: massively expand README, add BUGS.md catalogue, apply 7 safe fixes by lightchainai · Pull Request #16 · lightchain-protocol/lcai-dApp-hub · GitHub (merged)
What just shipped
README went from 16 lines → 400+ lines — full project guide: tech stack, local dev, build, deploy, official-badge mechanics, image guidelines, tag taxonomy, security model, contributing flow.
BUGS.md is now live — we audited the entire codebase and catalogued 16 named issues with severity, file refs, repro steps, and suggested fixes. 7 are fixed in this PR. The other 9 are publicly documented for community PRs.
Security hardened:
• External URL validation — javascript:, data:, file: schemes now rejected at build time
• Image paths constrained to repo-local (/images/dapp-item-{logo,thumb}/...)
• Content-Security-Policy on /_next/image responses
• Defense-in-depth headers (X-Frame-Options, Referrer-Policy, Permissions-Policy, no X-Powered-By)
• Per-file try/catch in the loader — one malformed JSON no longer blanks the entire catalogue
Want to list your dApp?
The path is now stupid simple — open one PR with a JSON file + two images:
Schema, image dimensions, tag taxonomy, all spelled out.
Let’s build the most documented, most contributor-friendly dApp hub in crypto 