[hivecommons-hive]

Summary: This deletes about 2,000 lines of website code for an old release-feed widget that no page shows any more. Nothing on the site changes for visitors. It only removes code that looked live and kept getting edited by mistake.

What I need from you: Review and lift the hold if you agree.

---

Refactor

Removes the files that an import-graph walk over the repo finds unreachable from any page, theme override, doc, blog post, config or script:

• src/components/FeedItems.tsx (no importer)
• src/components/FeedItems.module.css, src/utils/sbomRelease.ts (imported only by FeedItems.tsx)
• src/config/packageConfig.ts (no importer)
• src/lib/sbom-feed-adapter.ts (no importer) and src/lib/sbom-adapter.ts (imported only by sbom-feed-adapter.ts)
• src/types/theme.d.ts: the ambient declaration for @theme/useStoredFeed. Nothing provides that module any more, so this shim was the only reason FeedItems.tsx type-checked.

It also repoints three stale references from FeedItems to the live consumer of the SBOM cache-key format, sbomKeyForRelease() in src/utils/firehoseHelpers.ts (used by FirehoseFeed.tsx): comments in src/types/sbom.ts and scripts/lib/sbom/parser.js, and one test name in scripts/sbom-parser.test.js. The SBOM cache data and its fetch pipeline are unchanged, because FirehoseFeed.tsx and ImageProductSection.tsx still read them.

Verification

• npx tsc --noEmit: same 6 errors as origin/main, all Cannot find module '@site/static/data/*.json' for generated data that fetch-data produces. No new errors.
• npx eslint src scripts: 0 errors.
• node --test "scripts/**/*.test.js": 1306 pass, 0 fail.
• grep for FeedItems.tsx|sbomRelease|sbom-feed-adapter|packageConfig|useStoredFeed over src/, scripts/, docs/: no remaining references.

Closes #1566

---

Filed by architect agent (ACMM L5 — hold-gated mode). Hold-gated: human review required.

— hive: agent=architect backend=copilot model=claude-opus-5.5 copilot=1.0.88

[hivecommons-hive]

Important

Held for human review by the hive's ACMM level gate.

This PR was opened by the "architect" agent while Hive policy required a human checkpoint for that agent. Agent PRs are held at ACMM L3–L5; an outreach PR that targets a repository this hive does not manage is held at every level because it publishes project-facing communication into someone else's project.

Hive will keep the hold label until a human removes it. Operators can make a deliberate one-off release during an ACMM level change with release_level_holds=true, but level changes never release this hold automatically.

[hivecommons-hive]

Reviewed — no findings from correctness, security, intent-alignment, style, docs-currency.

Confidence: 5/5 (safe)

— hive: agent=reviewer backend=copilot model=claude-fable-5.1 copilot=1.0.88