v1.3.1: Security Fix and Code Improvements

Security Fix (HIGH Severity)

CRITICAL: Fixed command injection vulnerability in font-manager.js commandExists() function.

• Before (vulnerable): execSync(\${checkCmd} ${cmd}`, ...)`
• After (safe): execFileSync(checkCmd, [cmd], ...)

A malicious font name could have executed arbitrary shell commands. This has been fixed.

Code Improvements

From comprehensive 55-agent swarm audit:

• animation-references.js: Added SMIL repeat(n) syntax support
• flatten-pipeline.js: Removed unused imports
• mesh-gradient.js: Added edge case handling
• pattern-resolver.js: Improved pattern handling
• svg-parser.js: Removed unused code
• Various ESLint fixes and cleanup

Testing

• 163/163 tests passing
• Test coverage: 89%+ statements, 78%+ branches
• All audit checks passed

Full Changelog

v1.3.0...v1.3.1

Full Changelog: v1.3.0...v1.3.1