@askalf/dario 2.2.3 → 2.2.5

package/README.md

@@ -19,6 +19,7 @@
   <a href="#openai-compatibility">OpenAI Compat</a> &bull;
   <a href="#cli-backend">CLI Backend</a> &bull;
   <a href="#usage-examples">Examples</a> &bull;
+  <a href="#trust--transparency">Trust</a> &bull;
   <a href="#faq">FAQ</a>
 </p>
 
@@ -34,6 +35,35 @@ export ANTHROPIC_API_KEY=dario                    # or OPENAI_API_KEY=dario
 
 Opus, Sonnet, Haiku — all models, streaming, tool use. Works with Cursor, Continue, Aider, LiteLLM, Hermes, OpenClaw, or any tool that speaks the Anthropic or OpenAI API. When rate limited, `--cli` routes through Claude Code for uninterrupted Opus access.
 
+<table>
+<tr>
+<td colspan="3" align="center"><br/><strong>Independently reviewed by 3 competing AI companies</strong><br/><br/></td>
+</tr>
+<tr>
+<td width="33%" valign="top">
+
+**Grok** (xAI)
+
+*"Dario works great and is safe. Fully functional with OpenClaw / Hermes. Gives you Opus 4.6, Sonnet & Haiku using your existing Claude Max/Pro sub. No extra API key or billing needed. Streaming + tools work perfectly. 100% open-source (~1100 lines TS), runs locally only, proper OAuth (PKCE), no telemetry. Highly recommended if you want a clean local proxy."*
+
+</td>
+<td width="33%" valign="top">
+
+**Copilot** (Microsoft)
+
+*"Verdict: Safe for local use — well-implemented with strong security practices. Minimal attack surface: 1 production dependency, PKCE OAuth, localhost-only binding, timing-safe auth, zero telemetry. The main risk vector is operator error rather than code defects."*
+
+</td>
+<td width="33%" valign="top">
+
+**Gemini** (Google)
+
+*"Highly recommended for personal, local development. Solves a massive pain point for developers by bridging Claude Max/Pro subscriptions with developer IDEs, saving substantial API costs. Modular & lean (~1100 lines), modern PKCE auth, SSRF protection, mature CI/CD pipeline with CodeQL and npm provenance attestations."*
+
+</td>
+</tr>
+</table>
+
 ---
 
 ## The Problem
@@ -422,20 +452,6 @@ const status = await getStatus();
 console.log(status.expiresIn); // "11h 42m"
 ```
 
-## What Others Are Saying
-
-> *"Dario works great and is safe. Fully functional with OpenClaw / Hermes. Gives you Opus 4.6, Sonnet & Haiku using your existing Claude Max/Pro sub. No extra API key or billing needed. Streaming + tools work perfectly. 100% open-source (~1100 lines TS), runs locally only, proper OAuth (PKCE), no telemetry. Highly recommended if you want a clean local proxy."*
->
-> — [Grok](https://x.com/grok) (xAI), independent code review
-
-> *"Verdict: Safe for local use — well-implemented with strong security practices. Minimal attack surface: 1 production dependency, PKCE OAuth, localhost-only binding, timing-safe auth, zero telemetry. The main risk vector is operator error rather than code defects."*
->
-> — GitHub Copilot (Microsoft), independent code review
-
-> *"Highly recommended for personal, local development. Solves a massive pain point for developers by bridging Claude Max/Pro subscriptions with developer IDEs, saving substantial API costs. Modular & lean (~1100 lines), modern PKCE auth, SSRF protection, mature CI/CD pipeline with CodeQL and npm provenance attestations."*
->
-> — Google Gemini, independent code review
-
 ## Trust & Transparency
 
 Dario handles your OAuth tokens. Here's why you can trust it:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "2.2.3",
+  "version": "2.2.5",
   "description": "Use your Claude subscription as an API. No API key needed. Local proxy for Claude Max/Pro subscriptions.",
   "type": "module",
   "bin": {