MaskFlow v2.1.0 — Open Source Ready

MaskFlow v2.1.0 is the first formal open-source readiness release. It turns the existing product codebase into a safer, reproducible and contributor-friendly project.

Highlights

• Adopted the GNU AGPL-3.0 license and added third-party notices.
• Redesigned the README with four real product screenshots and a clearer upload → segment/review → export story.
• Added cross-platform quick-start and production deployment guidance.
• Made fresh Docker Compose deployments self-contained: MySQL and API volumes are created automatically.
• Bound Web, API, SAM, MySQL and MinIO to loopback by default for safer local deployment.
• Added production configuration that rejects example/development secrets and disables inline password reset and billing development mode.
• Enabled SAM internal authentication by default and switched key comparison to constant-time comparison.
• Added consistent minimum password validation for registration, reset and password change.
• Added GitHub Actions CI, Dependabot and protected the master branch.
• Updated vulnerable frontend transitive dependencies; high-severity npm audit findings are now zero.

CI verification

All checks passed on master:

• Frontend build and high-severity npm audit
• .NET 9 backend test suite
• Python source checks
• Docker Compose configuration validation

Deployment notes

Existing deployments should compare their .env with .env.example or .env.production.example. Production hosts must replace every replace-me value. Internal services remain bound to 127.0.0.1 unless an explicit bind address is configured.

SAM 3 weights are not included. Request access and download sam3.pt from https://huggingface.co/facebook/sam3, then place it at 资源/模型/sam3.pt.

See 文档/修改记录.md for the project changelog.