Remediation of an independent code audit (2026-06-10 Round 2). All five findings
were documentation drift — no code defect. Round 1's code/security fixes were
re-confirmed intact.
Fixed
- Install snippets pinned to the current release. The SwiftPM dependency
examples inREADME.md(from: "1.4.0") and the DocC Getting Started
article (from: "1.3.0") now usefrom: "1.12.3", so new consumers pick up
the audited cancellation, sandbox, memory-limit, and documentation fixes
instead of a pre-remediation baseline. - Configuration reference corrected (
docs/index.md). The reference wrongly
claimed onlyvmMemoryLimitcarried an initializer default; all five
LuaEngineConfiguration.initparameters default. The sample signature now
shows every default and adds thecooperativeCancellationoption. - Testing guide aligned to current CI topology (
TESTING.md). Replaced the
staletest-yams-off/test-tomlkit-onjob descriptions with the unified
data-driventest-togglesjob, documented the requireddocs(DocC) gate,
corrected theall-testsdependency list, and fixed the quick-test
description (the--quickscript enables all three sibling-clone optional
dependencies, not the default dependency set).