[Announcements] Security Notice Regarding the Former Hope UI `.com` Domain

Summary

The historical Hope UI domain hope-ui[.]com is no longer controlled by the original Hope UI project. Do not visit the affected domain.

OpenList documentation may contain historical references to this .com domain. These references must now be considered untrusted and should be removed or replaced.

This is an external-link supply-chain issue caused by an expired domain being re-registered by a third party. There is currently no indication that OpenList infrastructure itself has been compromised.

Background

The affected .com domain was historically used as the official website and documentation domain for Hope UI.

Public records confirm that the Hope UI maintainer was using this domain for the project in 2022.

The previous registration later ended, and public domain records indicate that a new registration cycle began on 2024-04-24.

For security purposes, 2024-04-24 should be treated as the date when the previous trust relationship with the Hope UI project became invalid.

The exact date when unrelated or unsafe content was first published on the affected domain has not been confirmed.

Impact

Any OpenList documentation, source code, generated pages, comments, archived content, or other project resources containing links to the affected .com domain may direct users to a website that:

• is no longer associated with Hope UI;
• is controlled by an unrelated third party;
• may contain inappropriate or unsafe content;
• may change its content or behavior without notice.

Users may incorrectly assume that such a link remains trustworthy because it appears in official OpenList documentation.

Required Actions

Maintainers and contributors should:

1. Search OpenList repositories and documentation for historical Hope UI .com links.
2. Remove or replace all affected references.
3. Check generated documentation and static build artifacts for remaining references.
4. Avoid visiting the affected domain while performing the cleanup.
5. Prevent the affected domain from being reintroduced into documentation where practical.

When historical Hope UI documentation is required, use a known trusted archive or the project's historical Netlify deployment instead.

Recommended Follow-up

We should also review other external links in OpenList documentation, especially links to:

• abandoned open-source projects;
• domains maintained by individual developers;
• projects that have moved to a different website;
• domains whose ownership or registration has changed.

For long-lived documentation, external domains should not be assumed to remain trustworthy indefinitely.

Automated checks for expired domains, ownership changes, unexpected redirects, and other significant external-link changes may help prevent similar incidents.

Security Note

Do not open or manually verify the affected .com domain.

This notice intentionally avoids providing a clickable version of the affected address.

If you discover additional references to the affected domain in OpenList repositories or documentation, please remove them or report their location in this issue.

Search the OpenList repositories and documentation for the defanged historical Hope UI .com references; do not visit the domain. Check generated documentation and static build artifacts, then remove or replace every affected reference and confirm the unsafe domain is absent.