Repository navigation
Releases: FrankFMY/fmy-stack
Release list
Package runtime and distribution repairs
Five independently usable packages: core/validation/UI 1.1.2 and db-utils/elysia-kit 2.0.0.
- Portable Node/Bun password KDF interchange and honest legacy verification/migration contracts.
- Maintained external Drizzle/Elysia identity and explicit minimum peers; the 2.0.0 migration documents changed compatibility/defaults.
- Authentication/role enforcement on consuming routes, production error sanitization and preserved 404/400 behavior.
- Actual PostgreSQL/PGlite behavior plus Svelte/Tailwind/client/SSR and CSS export qualification.
- Complete standalone English API/install/license/contact documentation; full Apache-2.0 LICENSE/NOTICE. Older published PolyForm artifacts retain their original rights.
Normal exact PR-head and actual final-main CI passed; installed sealed tarball consumers passed. For a pre-registry installation, install the coordinated set of five attached archives together in one project, with the documented Drizzle/Elysia/Svelte peers. The existing older v1.1.2 tag is preserved, not moved.
The attached .tgz files are the qualified distributions; SHA256SUMS binds their exact bytes. Registry publication is separate from Git tag/release creation. Consult each npm page for actual available versions; if a target is not yet live, install the attached tarball with the documented runtime prerequisites.
fmy-stack v1.1.2
fmy-stack 1.1.2
Coordinated maintenance release for @frankfmy/core, validation, db-utils, elysia-kit, and ui.
- PBKDF2-SHA256 password hashes with legacy bcrypt/SHA verification and migration detection.
- Bounded cryptographic inputs and unbiased secure integer generation.
- Safer bulk database operations, physical-column upserts, and current Drizzle compatibility.
- Proxy-safe, bounded, independently composable Elysia rate limiting and propagated auth context types.
- Packaged Tailwind source registration and isolated five-package consumer verification.
- 377 repository tests, clean builds, package-contract checks, and zero dependency advisories.
The attached tarballs are exact release artifacts. npm publication is tracked separately.