docs(todos): drop landed items and refresh against main

[aidenybai]

Verified every entry in TODOS.md against the current main (77b49650), the README, action.yml, the lint plugin source, and the issue/PR states on GitHub. Removed items that are already done and rewrote partials so the file reflects what's actually open.

Not deleting the file — there are still genuinely open items (e.g. README still pins @main, no --package-json flag, no baseline mode, hosted-product work, P2 product decisions).

Removed because the work has landed

• ReDoS in glob compilation — landed as merged PR fix(core): replace hand-rolled glob compiler with picomatch + pathological-pattern caps #284 (picomatch + length cap + wildcard cap + compileGlobPatternsLenient); see packages/core/src/utils/match-glob-pattern.ts.
• Reconcile offline scoring — action.yml description now matches inspect.ts (skip score API, leave score output empty).
• Expose --annotations through action.yml — input declared and forwarded; documented in README.
• Add category-level rule controls — already marked done in the old file.
• Finish Husky / lint-staged docs — full section in README (lines 415–459) via PR triage: address #219 audit and #203 Husky/lint-staged recipe #403.
• Open PR Triage — all 13 PRs (feat: port PR 217 lint rule coverage #251, Security: Regular Expression Denial of Service (ReDoS) in glob pattern compilation #243, Fix/issue 216 react review audit #238, improve v2 rasmus #217, feat: add --package-json flag for custom package.json path #214, docs: add husky and lint-staged pre-commit integration guide (#203) #213, fix #210, Molten Hub Code: 100% Unit Test Coverage #207, docs: add Simplified Chinese README #189, feat: library-aware React 19 rules + test-file scoping + build-entry dead-code + js-set-map-lookups string fix #186, fix(react-doctor): detect index-derived key locals #179, feat(react-doctor): interactive code-health TUI as a tui subcommand #173, feat: port the React Compiler's HIR + validators into react-doctor #164) are now CLOSED on GitHub.
• Open Issue Triage — React Review Audit #219, React Review: errors & warnings on default branch #216, Hello #215, docs: add lint staged husky integration guide #203 are all CLOSED.
• Historical ledger entries for Document GitHub Action usage #82, feat(action): add offline input to skip remote API calls #107, Allow for annotations #81, Is it possible to run react doctor as a pre-commit hook? #74/Feature: scan staged (git index) content for pre-commit; document --diff vs working tree #115/docs: add lint staged husky integration guide #203, Support score calculation in CLI when running with --offline #89, Document --offline flag in README #99, docs: add lint staged husky integration guide #203 — superseded by the verified-done items above.
• Immediate Order fix(cli): indent multiline diagnostic help output #4 (triage stale PRs fix #210 / Molten Hub Code: 100% Unit Test Coverage #207) — both CLOSED.

Rewritten partials

• Suppression ergonomics narrowed to "Link PR-comment groups to suppression docs" — --explain/--why, --verbose hints, and --json suppressionHint already shipped.
• Mature-codebase adoption trimmed to the five sub-bullets that are still open: reduced-motion-aware autofixes, baseline mode, per-touched-line enforcement, per-module reports, parallel runner controls, and barrel-file opt-out.
• Test-noise suppression marked as substantially addressed (merged PRs fix(async-parallel): suppress in tests, browser fixtures, and ordered UI flows #270 and autoresearch: drive down react-doctor false positives across 32k diagnostics in 26 OSS repos #301); only the finishing audit remains.
• Immediate Order rewritten to: stable action tags + release workflow, delta-first PR comments, ship --package-json, ship baseline mode.

  

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
react-doctor-website	Ready	Preview, Comment	May 22, 2026 11:35pm

[react-doctor]

✅ No new issues

^{Reviewed by reactreview for commit cc19055. Configure here.}