Skip to content
View NickNojiri's full-sized avatar

Block or report NickNojiri

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
NickNojiri/README.md

Hi, I'm Nick Nojiri 👋

Software developer focused on web technologies, currently contributing to open source.

🔭 Open Source

Contributing to Google Lighthouse:

  • PR #17125 — surface the plugins used during a run in the report footer (issue #9934). Includes i18n, dark-mode-aware iconography, and unit tests, verified against the project's full lint/type-check/test/i18n CI suite.
  • PR #17127 — smoke test coverage proving CSS nesting is handled correctly by the unused-css-rules audit (issue #14718), with regression protection in both directions (unused nested rules counted, used nested rules not falsely flagged).
  • paulirish/lh-scorecalc #55 — fix stale scores when switching device type in the Lighthouse Score Calculator (issue #16609); root-caused via Playwright since the tool has no test harness, and fixed at its true upstream source repo after a maintainer redirected my initial PR.
  • PR #17131 — clamp used-byte accounting in the unused-CSS audit so overlapping/duplicate coverage ranges can't report negative wasted bytes (relates to #14718); with regression tests.

Read the full write-up

Contributing to Anthropic's Claude Code Action:

  • PR #1502 — ✅ merged — closed a security gap in the content sanitizer: GitHub App user-to-server (ghu_) tokens, the one missing prefix from GitHub's documented token formats, now get redacted before issue/PR content reaches the model. Includes regression tests; full suite green (771 tests).
  • PR #1503 — added a trusted-author gate to the @claude trigger in the project's example and CI workflows (addresses issues #1481, #1445, #1068), so untrusted or bot triggers fail fast before a runner starts.
  • PR #1504 — closed an entity-encoding bypass in the prompt-injection sanitizer: <!-- … --> survived the comment-strip pass and was later decoded back into a live HTML comment reaching the model. Fixed by re-stripping after decoding; regression tests added.

Read the full write-up

🛠 Projects

📫 Contact

Popular repositories Loading

  1. SocialAgent-Team10 SocialAgent-Team10 Public

    oh who wants coffee

    Python 1

  2. cecs-105 cecs-105 Public

  3. test test Public

    C

  4. CS150-repo CS150-repo Public

  5. NickNojiri NickNojiri Public

  6. FCC-timestamp-microservice FCC-timestamp-microservice Public

    JavaScript