projdump v2.0.1 — the security release

The security release

🔒 Security

• Config files are no longer sourced from the project being dumped. A config file is executable shell code, and ./.projdumprc used to be sourced automatically — running projdump inside an untrusted repository could execute that repository's code. Only your own XDG config auto-loads now; a project-local .projdumprc requires explicit --config .projdumprc (--no-config silences the one-time notice)

🐛 Fixed

• --config without a value failed silently — now a clear error
• uninstall.sh --prefix= (empty = value) silently resolved to /bin — now rejected
• The zsh completion is a native #compdef script and install.sh ships it

📚 Docs

• Docs site synced with v2: every new flag, recipes, playground presets

Full Changelog: v2.0.0...v2.0.1

Docs: https://cheginisoroush.github.io/projdump/

Install: curl -fsSL https://raw.githubusercontent.com/CheginiSoroush/projdump/main/install.sh | bash