GVault 0.1.13
What's Changed
- Bound declared and streamed JSON API request bodies with explicit
400and413responses. - Added independent per-account and per-source authentication throttles before synchronous password hashing.
- Added explicit trusted-proxy handling, bounded limiter state, hardened proxy/deployment guidance, and audit-safe source evidence.
Validation: strict TDD, 173/173 tests, server smoke 1/1, npm audit 0 vulnerabilities, independent CodeRabbit review with 0 remaining findings.
Full Changelog: v0.1.12...v0.1.13