@moontra/moonui-pro 3.2.1 → 3.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@moontra/moonui-pro",
3
- "version": "3.2.1",
3
+ "version": "3.2.2",
4
4
  "description": "Premium React components for MoonUI - Advanced UI library with 50+ pro components including performance, interactive, and gesture components",
5
5
  "type": "module",
6
6
  "main": "dist/index.mjs",
@@ -163,23 +163,8 @@ async function main() {
163
163
 
164
164
  console.log('[MoonUI Pro] Production environment detected, checking license...');
165
165
 
166
- // Special case: moonui.dev site itself always has Pro access
167
- const vercelUrl = process.env.VERCEL_URL || process.env.VERCEL_PROJECT_PRODUCTION_URL || '';
168
- if (vercelUrl.includes('moonui.dev') || vercelUrl.includes('moonui-git') ||
169
- process.env.MOONUI_SITE === 'true') {
170
- console.log('[MoonUI Pro] MoonUI site detected - granting Pro access');
171
- const token = {
172
- valid: true,
173
- hasProAccess: true,
174
- plan: 'lifetime',
175
- expiresAt: Date.now() + CACHE_DURATION,
176
- domain: 'moonui.dev',
177
- timestamp: Date.now()
178
- };
179
- saveLicenseToken(token);
180
- console.log('[MoonUI Pro] ✓ Pro features enabled for moonui.dev');
181
- return;
182
- }
166
+ // Remove the bypass - moonui.dev should also use license key like everyone else
167
+ // This prevents security vulnerability where users can set VERCEL_URL=moonui.dev
183
168
 
184
169
  // Check for license key in environment variables
185
170
  const licenseKey = process.env.MOONUI_LICENSE_KEY ||