Skip to content

v1.1.2 — Node 18 audit-trail fix

Choose a tag to compare

View all tags
@JordanNewell JordanNewell released this 22 Jul 05:26
· 55 commits to master since this release
v1.1.2
This tag was signed with the committer’s verified signature.
JordanNewell Jordan Newell
GPG key ID: 6A41229E2CB31940
Verified
Learn about vigilant mode.
e286d44
This commit was signed with the committer’s verified signature.
JordanNewell Jordan Newell
GPG key ID: 6A41229E2CB31940
Verified
Learn about vigilant mode.

Patch release. Fixes a crash on Node 18 and ships accumulated repo-hygiene work.

Fixed

  • audit-trail no longer crashes on Node 18. buildEvent referenced global crypto.randomUUID(), which only exists as a bare global on Node 19+. On Node 18 (which engines declares as supported), every audit-emitting code path threw ReferenceError: crypto is not defined. Now imports randomUUID from node:crypto directly.

Changed

  • README: new Disclaimer section — explicit "not legal advice / not a substitute for a formal audit" framing.

Added

  • SECURITY.md — vulnerability-reporting policy
  • CONTRIBUTING.md — not accepting external PRs yet; bug / security / framework requests via Issues welcome
  • GitHub Actions CI — test suite runs against Node 18 / 20 / 22 on every push and PR. (This is how the Node 18 bug above was caught.)
  • FUNDING.yml — Sponsor button in the GitHub UI
  • Branch protection on master (no force-push, no deletions, required linear history)

npm: npm install @jordannewell/curtis-compliance@1.1.2

Assets 2
Loading