I hunt bugs in open-source VPN and proxy software — panels, clients and network cores. Every report comes with a reproduction and a test that fails before the fix.
Accepted upstream fixes
| Project | Fix |
|---|---|
| SagerNet/sing-tun | #106 Fix IP headers of synthesized UDP replies (stale ECN marks, RFC 3168) · #107 Do not route replies of peer-initiated UDP flows into the TUN |
| SagerNet/sing | #119 Fix a race between Read and Close in cached connections · #118 Cancel the winning attempt's context in parallel dial |
| 2dust/v2rayN | #10548 Keep the WebSocket path query when removing ed (sing-box) |
| MHSanaei/3x-ui | #7042 A partial client update no longer wipes fields it does not mention |
| MetaCubeX/mihomo | #3415 Convert HTTPUpgrade share links correctly |
| MetaCubeX/metacubexd | #2246 Keep config edits on remote profiles across refresh · #2247 Offer only TUN stacks mihomo accepts |
| hiddify/hiddify-app | #2465 Accept a base64 profile title without padding |
| hiddify/hiddifypanel | #176 Turning off HTTP no longer drops Shadowsocks 2022 and Mieru · #178 Renew no longer exceeds max active users |
Own projects
- still-ui — a maintained fork of the 3x-ui panel: releases built and attested by GitHub Actions.
- xui-doctor — a read-only health checker for 3x-ui and still-ui panels.
How I work: reproduce first, prove it with a test that fails before the fix, keep the change small, say plainly what was not tested.