Skip to content

v0.1.0 — First standard source release

Choose a tag to compare

View all tags
@Tak1naa Tak1naa released this 22 Oct 18:11
· 8 commits to main since this release
v0.1.0
199c3aa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.1.0 — First standard source release

首个非预发布源码正式版。This is a source release, not a production-security certification or a gigabit performance guarantee.

Included

  • Bilingual Chinese/English README, real desktop/mobile/support-dialog screenshots, and a non-payable public support placeholder.
  • CONTRIBUTING and SECURITY policies, issue/PR templates, private vulnerability reporting, dependency update configuration, repository description and Topics.
  • A public v0.2.0 milestone and issue-backed roadmap for compatibility, failure handling, installation boundaries, abuse resistance, supply-chain evidence and performance/recovery testing.
  • Patched PHP 8.3.36 base digest and minimum-runtime gate, disabled unused upload-progress tracking, and a Redis health-timeout 503 fix.
  • Read-only, commit-pinned GitHub Actions: source/static checks, PHP lint, real Lua admission races, public container build/start, Chromium Worker/cancel/quota/release, strict TLS/error checks, and sanitized screenshot artifacts.

Preserved

The upstream LibreSpeed/bg6cq measurement engine, Worker, endpoint paths, original attribution and LGPL-3.0 license. Default public-source listeners remain loopback-only. No private production configuration, credentials, certificates or personal payment QR code is included.

Verification and limitations

Local available offline/Lua/static checks and PHP checks in the official 8.3.36 runtime passed. Local ShellCheck was explicitly skipped; CI installs and requires it. The interface screenshots were visually reviewed; they show the idle public template, not fabricated measurements. Full Docker/Chromium evidence is linked below.

Throttled loopback measurements are functional evidence, not real-world throughput. Public deployment still requires reviewed TLS, routing/firewall and client-IP boundaries, request-level abuse protection, fresh dependency scans and representative load/recovery testing. See SECURITY.md. Open roadmap issues remain open.

The historical v0.1 prerelease is retained unchanged. Verify the attached source archive using SHA256SUMS before extraction.

Development and review: #8

Release commit: 199c3aa6ab41465705c8263bd48c8ef8256cd950.

Attached archive SHA256: 50a72388052870de53318b719e041187176c2ea6ab85bde7af65d567d3e57de1. All 109 files were compared byte-for-byte with the release tag before upload.

Assets 4
Loading