Skip to content

1.2.8 — Technical Debt

Choose a tag to compare

View all tags
@SkyliteDesign SkyliteDesign released this 09 Aug 18:28
v1.2.8
75afcfd

VelinStyle 1.2.8 — Technical Debt

Audit follow-up after docs/internal/CODE_AUDIT_2026-08-06.md. Focus: honest metrics, check integration, tests — not new product surface.

Highlights

  • velinstyle check runs a security step (doctor-mode engine)
  • publish.pack-dry-run — npm pack --dry-run with timeout / missing-npm warnings
  • Lockfile findings use no-lockfile (not mislabeled “outdated”)
  • Malware category for lifecycle/typosquat; empty malware score is n/a
  • Motion V2 triggers: planned + runtime: false, visible fallback documented
  • Experience --help includes design (Motion)
  • npm run test:security includes tests/security.test.js
npx velinstyle check .
npx velinstyle security publish
npx velinstyle --help

Guide: docs/guides/velin-security.md

Not in 1.2.8

  • Live npm outdated
  • Motion Studio / true V2 trigger runtime
  • npm publish / GitHub Release (local pin only until you ship)
Assets 2
Loading