
Tadej Vengust contributed to MetaMask/core and related repositories by engineering robust account upgrade flows, permissions management enhancements, and standards-driven API integrations. He implemented internal RPC middleware for EIP-7702, enabling auditable account upgrades, and delivered EIP-7715 discoverability methods to standardize dApp permission queries. His work included dependency management, TypeScript-based validation, and comprehensive testing infrastructure, ensuring maintainable and reliable code. Tadej improved onboarding and documentation in oasis-sdk and metamask-docs, aligning developer experience with evolving product requirements. Across JavaScript and Node.js projects, he addressed security vulnerabilities, streamlined release management, and reinforced permission handling, demonstrating depth in full stack development and release engineering.

January 2026 — MetaMask/core: Delivered EIP-7715 integration and RPC API updates, enabling discovery of execution permissions for dApps. Implemented new EIP-7715 discoverability methods and introduced breaking changes to align with the specification, with dependencies updated across multiple MetaMask packages. Prepared for release with version 751.0.0, ensuring standards-compliant rollout and enhanced wallet middleware capabilities. This work improves dApp capability discovery, standardizes permission handling, and reduces integration friction for developers.
January 2026 — MetaMask/core: Delivered EIP-7715 integration and RPC API updates, enabling discovery of execution permissions for dApps. Implemented new EIP-7715 discoverability methods and introduced breaking changes to align with the specification, with dependencies updated across multiple MetaMask packages. Prepared for release with version 751.0.0, ensuring standards-compliant rollout and enhanced wallet middleware capabilities. This work improves dApp capability discovery, standardizes permission handling, and reduces integration friction for developers.
Month: 2025-12 | Repo: MetaMask/core. This period delivered the Gator Permissions Management Enhancements, featuring auto-refresh of the gator permissions map after revocation events to ensure up-to-date access control and a smoother user experience. Release activity culminated in MetaMask/core v0.7.0 with updated dependencies and enhanced permission management features. Major bug-related improvement included fixing stale permissions state by refreshing the gator permissions map after revocation state changes, reducing permission drift and reliability risks. Overall impact: stronger security posture for permission handling, improved reliability and UX for developers and users, and a maintainable codebase with refreshed dependencies. Technologies/skills demonstrated: permission management design, release engineering, dependency management, and code hygiene through targeted refactors and chore commits.
Month: 2025-12 | Repo: MetaMask/core. This period delivered the Gator Permissions Management Enhancements, featuring auto-refresh of the gator permissions map after revocation events to ensure up-to-date access control and a smoother user experience. Release activity culminated in MetaMask/core v0.7.0 with updated dependencies and enhanced permission management features. Major bug-related improvement included fixing stale permissions state by refreshing the gator permissions map after revocation state changes, reducing permission drift and reliability risks. Overall impact: stronger security posture for permission handling, improved reliability and UX for developers and users, and a maintainable codebase with refreshed dependencies. Technologies/skills demonstrated: permission management design, release engineering, dependency management, and code hygiene through targeted refactors and chore commits.
Month 2025-11: MetaMask/core delivered targeted UX and stability improvements to the revocation flow and permissions event handling, tied to the 685.0.0 release. The changes reduce user confusion and operational risk by ensuring revocation transactions are only added to pending after explicit user confirmation and by adopting breaking changes in the permissions event model to fix cancellations-related bugs and improve reliability. These updates demonstrate end-to-end ownership from UX through release engineering and changelog integrity.
Month 2025-11: MetaMask/core delivered targeted UX and stability improvements to the revocation flow and permissions event handling, tied to the 685.0.0 release. The changes reduce user confusion and operational risk by ensuring revocation transactions are only added to pending after explicit user confirmation and by adopting breaking changes in the permissions event model to fix cancellations-related bugs and improve reliability. These updates demonstrate end-to-end ownership from UX through release engineering and changelog integrity.
October 2025 (2025-10) summary for MetaMask/core: Delivered the foundational account upgrade flow via internal RPC middleware. Introduced the @metamask/eip-7702-internal-rpc-middleware package implementing internal RPC methods wallet_upgradeAccount and wallet_getAccountUpgradeStatus, with validation, TypeScript typings, and testing infrastructure, using a hook-based architecture. Completed monorepo integration and ownership updates, culminating in the initial release (0.1.0) and corresponding monorepo version bumps. These changes establish a robust, auditable upgrade path for accounts and lay the groundwork for future upgrade-related features.
October 2025 (2025-10) summary for MetaMask/core: Delivered the foundational account upgrade flow via internal RPC middleware. Introduced the @metamask/eip-7702-internal-rpc-middleware package implementing internal RPC methods wallet_upgradeAccount and wallet_getAccountUpgradeStatus, with validation, TypeScript typings, and testing infrastructure, using a hook-based architecture. Completed monorepo integration and ownership updates, culminating in the initial release (0.1.0) and corresponding monorepo version bumps. These changes establish a robust, auditable upgrade path for accounts and lay the groundwork for future upgrade-related features.
August 2025 monthly summary focused on security maintenance and dependency hygiene for the MetaMask extension. Delivered a vulnerability remediation by upgrading the @metamask/message-signing-snap package to v1.1.3. The change was confined to dependency management (yarn.lock), preserving code integrity while reducing exposure to known vulnerabilities and aligning with ongoing security standards.
August 2025 monthly summary focused on security maintenance and dependency hygiene for the MetaMask extension. Delivered a vulnerability remediation by upgrading the @metamask/message-signing-snap package to v1.1.3. The change was confined to dependency management (yarn.lock), preserving code integrity while reducing exposure to known vulnerabilities and aligning with ongoing security standards.
Month: 2025-07 — MetaMask/metamask-docs
Month: 2025-07 — MetaMask/metamask-docs
April 2025: Focused on developer experience and documentation improvements for oasis-sdk. Updated ROFL Development Docker prerequisites to pin the rofl-dev image to the 'main' tag, ensuring users pull the latest stable development environment. The change enhances onboarding reliability and reduces environment-related issues for new and existing contributors.
April 2025: Focused on developer experience and documentation improvements for oasis-sdk. Updated ROFL Development Docker prerequisites to pin the rofl-dev image to the 'main' tag, ensuring users pull the latest stable development environment. The change enhances onboarding reliability and reduces environment-related issues for new and existing contributors.
Overview of all repositories you've contributed to across your timeline