🟢 #2 Fix React Server Components CVE vulnerabilities +75 -75 2mo ago self by
vercel[bot] ↗ analysis ↗ GitHub > [!IMPORTANT]
fpvetleseter/mike
Repositioning upstream mike as Juridisk - a Norwegian legal SaaS for SMEs, with a complete backend scaffold and product architecture.
fpvetleseter is building Juridisk on top of the upstream mike codebase. The work so far covers the full productization stack: a Supabase schema with pgvector RAG, a dedicated requireAuth middleware that trusts JWTs rather than request bodies, a per-user rate limiter backed by a security definer RPC, and a 298-line Lovdata ingestion script that batch-embeds Norwegian statutory HTML. The AGPL/proprietary directory split is also in place for code that can't be open-sourced.
On the planning side, fpvetleseter committed a 1,824-line document set covering the PRD, a three-agent architecture (Router + Legal Assistant + Document Analysis + Drafting), agent handoff protocols, a caching policy, and CLAUDE.md guardrails for AI-assisted development.
There's also an open bot PR for the React Server Components RCE (CVE-2025-55182 / CVE-2025-66478), and some earlier churn around a bun-to-npm lockfile switch that accidentally leaked a 60MB binary into history before the build was repaired.
What's in it
- Norwegian legal grounding Built around Norwegian public law via a Lovdata ingest path, so answers are anchored in the jurisdiction the product serves.
- Small-business positioning Aimed squarely at Norwegian startups and SMBs who can't justify a lawyer's hourly rate for routine legal questions.
- Juridisk rebrand A full identity pivot away from generic Mike - new product name, new audience, new strategic docs spelling out the thesis.
- Backend foundations Authentication, rate limiting, and a fresh data schema are in place, signaling intent to ship as a real SaaS rather than a demo.
- AGPL licensing split A deliberate licensing posture separating the commercial product from the open-source lineage it forked from.
- Security patching cadence Automated advisories - including a critical React Server Components RCE - are being picked up and merged rather than left to drift.
Direction
brandingi18ninfrastructure
Activity
🟢 #3 Fix React Server Components CVE vulnerabilities +75 -75 2mo ago self by
vercel[bot] ↗ analysis ↗ GitHub > [!IMPORTANT]
📝 Backend lockfile thrash: bun ↔ npm with an accidental 60MB binary leak 3 commits 2mo ago minor change
📝 fpvetleseter is turning Mike into a paid Norwegian-law service called Juridisk 2 commits 2mo ago searchinfrastructure draft
A backend overhaul lays the plumbing for a subscription legal-research product built on Norwegian statute.
🟢 #1 Fix: Update bun.lock and remove package-lock.json +57 -5,175 2mo ago self by
railway-app[bot] ↗ analysis ↗ GitHub ## Problem
Nearly 1,800 lines of design documents lay out a Norwegian legal assistant in detail - none of which has been built yet.
📝 Repair Railpack build by syncing Bun lockfile 0 commits — minor change
📝 Bot PR: bump React and Next.js to patch CVE-2025-55182 / CVE-2025-66478 (RCE) 0 commits — securityinfrastructure draft
A Vercel bot opened a PR against fpvetleseter/mike to patch an unauthenticated RCE in the React Flight protocol. No application code changes - this is a framework dependency bump only.
📝 Patch React Server Components RCE (CVE-2025-55182) 0 commits — minor change
Threads of work (detailed view)
fpvetleseter is turning Mike into a paid Norwegian-law service called Juridisk
A backend overhaul lays the plumbing for a subscription legal-research product built on Norwegian statute.
Two-day backend scaffold: AGPL split, auth middleware, rate limiting, Lovdata ingest
fpvetleseter built the entire Juridisk backend in two commits - schema, auth, rate limiting, and a 298-line Lovdata ingestion script. Several pieces are generic enough to pull into any mike fork regardless of whether you're targeting Norway.
fpvetleseter writes the whole blueprint before the code
Nearly 1,800 lines of design documents lay out a Norwegian legal assistant in detail - none of which has been built yet.
Juridisk product docs: PRD, roadmap, agent architecture, and AI guardrails
fpvetleseter dropped 1,824 lines of planning artifacts in one commit - a full product spec, a three-agent architecture document, and a CLAUDE.md with project-specific AI development rules. None of it is code, but the AGENTS.md is worth reading if you're designing multi-agent topologies on top of mike.
Bot PR: bump React and Next.js to patch CVE-2025-55182 / CVE-2025-66478 (RCE)
A Vercel bot opened a PR against fpvetleseter/mike to patch an unauthenticated RCE in the React Flight protocol. No application code changes - this is a framework dependency bump only.
Pull requests (detailed view)
🟢 Open (3)
by
vercel[bot] · opened 2mo ago by
vercel[bot] · opened 2mo ago by
railway-app[bot] · opened 2mo ago