hobokenchicken 2e8260bc8c security: upgrade dependencies to fix critical and high vulnerabilities
- next: 14.2.15 → 15.2.5 (fixes critical DoS, SSRF, cache poisoning)
- react/react-dom: 18.2.0 → 19.1.0
- @solana/spl-token: 0.3.9 → 0.4.14 (bigint-buffer overflow fix)
- vitest: 1.1.0 → 3.0.0 (esbuild dev server exposure fix)
- mocha: 9.0.3 → 11.7.5 (serialize-javascript RCE fix)
- @solana/wallet-adapter-*: latest versions
- Add npm overrides for elliptic, lodash, esbuild, nanoid

Vulnerabilities: 44 (1 critical) → 23 (3 high, 20 low)

Refs: npm audit fixes for GHSA-7m27-7ghc-44w9, GHSA-3gc7-fjrx-p6mg
2026-04-14 14:15:48 -04:00
2026-04-14 13:42:35 -04:00

CoopCredits ($COOP) Media Rewards Ecosystem

A complete Solana-based rewards system integrated with Plex, Tautulli, and Overseer.

System Architecture

┌─────────────────────────────────────────────────────────────────────────────┐
│                           coop.hobokenchicken.com                           │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐  ┌─────────────────┐  │
│  │   Next.js    │  │   Express    │  │  PostgreSQL  │  │  Solana Devnet  │  │
│  │   Frontend   │◄─┤    API       │◄─┤   Database   │◄─┤   $COOP SPL     │  │
│  │              │  │              │  │              │  │    Token        │  │
│  └──────────────┘  └──────────────┘  └──────────────┘  └─────────────────┘  │
│         ▲                 ▲                                                    │
│         │                 │                                                    │
│    Plex OAuth      Tautulli Webhooks                                           │
│         │                 │                                                    │
│         ▼                 ▼                                                    │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐                         │
│  │ Plex Server  │  │  Tautulli    │  │  Overseer    │                         │
│  │  (Content)   │  │ (Analytics)  │  │  (Requests)  │                         │
│  └──────────────┘  └──────────────┘  └──────────────┘                         │
└─────────────────────────────────────────────────────────────────────────────┘

Quick Start

# 1. Clone and install dependencies
cd coop-credits
npm install

# 2. Set up environment
cp backend/.env.example backend/.env
# Edit backend/.env with your values

# 3. Start with Docker Compose
docker-compose up -d

# 4. Deploy Solana program
cd anchor-program
anchor deploy

# 5. Seed initial data
npm run db:seed

Project Structure

coop-credits/
├── anchor-program/     # Solana Anchor program for $COOP token
├── backend/           # Express API server
├── frontend/          # Next.js dashboard
├── shared/            # Shared types and utilities
├── docker/            # Docker configurations
├── deployment/        # Deployment scripts
└── docker-compose.yml # Full stack orchestration

User Flow

  1. Login → User visits coop.hobokenchicken.com, authenticates with Plex
  2. Wallet → Auto-created Solana wallet or connect existing
  3. Watch → Viewing on Plex → Tautulli triggers → $COOP minted
  4. Earn → Real-time balance updates on dashboard
  5. Spend → Request content on Overseer → $COOP deducted
  6. History → Full transaction history visible on dashboard

Admin Features

  • System overview and analytics
  • User management and balance adjustments
  • Minting rate controls
  • Spending controls and promotions
  • Emergency pause and recovery

Environment Variables

See backend/.env.example and frontend/.env.local.example for full configuration.

S
Description
Watch-to-earn credits for your Plex server. Earn by watching, spend on content requests. Self-hosted economics for media nerds.
Readme 1.6 MiB
Languages
TypeScript 75.2%
Shell 19.8%
Rust 2.6%
CSS 1.3%
Dockerfile 0.9%
Other 0.2%