Skip to content

v1.2.0: NPM Distribution & Security Hardening

Choose a tag to compare

View all tags
@dima6312 dima6312 released this 04 Jan 13:59
· 6 commits to main since this release
v1.2.0
678b5e5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🚀 Gr8hopper v1.2.0: Now on NPM!

This major update transforms Gr8hopper from a repository-only tool into a globally distributable package, while significantly hardening security for Docker and VPS deployments.

📦 NPM Package Distribution (New!)

  • CLI Support: New binary entry point allows running via npx gr8hopper or npm install -g.
  • Lightweight: Optimized package context (approx. 41KB).
  • Easy Setup: Running the command automatically initializes a local routes.json.

🛡️ Security & Container Hardening

  • Non-Root Execution: Docker containers run as user gr8hopper (UID 1001).
  • Named Volumes: Shifted to named volumes (gr8hopper-data) for cleaner persistence.
  • Environment Validation: Fail-early validation for ADMIN_USERNAME/ADMIN_PASSWORD.
  • Zero-Exposure Config: Standardized on .env files and EnvironmentFile patterns.

🛠️ Developer Experience (DX)

  • Husky Refinement: Properly chained lint-staged and tsc.
  • Storage Infrastructure: Fully asynchronous JsonFileAdapter.

🔄 Comparison: v1.1.2 vs v1.2.0

Feature v1.1.2 v1.2.0
Installation Git Clone only NPM / NPX / Global CLI
Docker User root gr8hopper (UID 1001)
Data Persistence Bind Mount (./data) Named Volumes (Safer)
Admin Setup Default placeholders Required Env Variable Validation
Assets 2
Loading