@dcyfr/ai 3.0.1 → 3.0.3

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 3.0.3
+
+### Patch Changes
+
+- [#173](https://github.com/dcyfr-labs/dcyfr-ai/pull/173) [`6c50c05`](https://github.com/dcyfr-labs/dcyfr-ai/commit/6c50c05f7c598f678907f43385eb653f0d2a341b) Thanks [@dcyfr](https://github.com/dcyfr)! - Remove unused `@mistralai/mistralai` dependency.
+
+  The Mistral SDK is not imported anywhere in the codebase — only a description string in `packages/ai/core/provider-registry.ts` references Mistral models served via the GitHub Models API, which doesn't require this SDK.
+
+  Clears downstream Dependabot alert [GHSA-3q49-cfcf-g5fm](https://github.com/advisories/GHSA-3q49-cfcf-g5fm) (malware in `@mistralai/mistralai` 2.2.2 / 2.2.3 / 2.2.4 with an overbroad `>= 0` blanket range that flags safe versions too) for downstream consumers like `dcyfr-labs/dcyfr-labs`.
+
 ## 3.0.1
 
 ### Patch Changes

package/LICENSE

@@ -1,13 +1,15 @@
-MIT License
+SPDX-License-Identifier: MIT
 
-Copyright (c) 2025-2026 DCYFR Labs (https://www.dcyfr.ai)
+# MIT License
+
+Copyright © 2025-2026 DCYFR Labs
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+in the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
 
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
@@ -20,28 +22,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
----
-
-## Commercial Use
-
-This software is dual-licensed:
-
-- **MIT License** applies to personal, educational, and non-commercial use
-- **Commercial License** required for business and revenue-generating use
-
-### Commercial use includes:
-- Using @dcyfr/ai in a product or service that generates revenue
-- Deploying in a business environment (>5 employees)
-- Providing consulting/services using @dcyfr/ai for profit
-- Distributing as part of a commercial offering
-
-### To obtain a commercial license:
-- View tiers: https://github.com/dcyfr/workspace/blob/main/SPONSORSHIP.md
-- Contact: licensing@dcyfr.ai
-- GitHub Sponsors: https://github.com/sponsors/dcyfr
-
-For questions about whether your use requires a commercial license, contact licensing@dcyfr.ai.
-
-## Trademark
+## Trademark Notice
 
-"DCYFR" is a trademark of DCYFR Labs. See TRADEMARK.md for usage guidelines.
+DCYFR is a trademark of DCYFR Labs. When using DCYFR in titles, product names,
+or branding, proper trademark notation should be used (DCYFR™, DCYFR Labs®).