Fix the audit findings in Tin's repair plan in one bounded pull request, in the site's own framework, for website.change.