@omss/core 0.0.2-beta.2 → 0.0.2-beta.3

package/README.md

@@ -1,21 +1,23 @@
 <div align="center">
 
-# OMSS Core
-
-<!-- 
-  <br />
+<picture>
+  <source
+    media="(prefers-color-scheme: dark)"
+    srcset="https://raw.githubusercontent.com/omss-spec/docs/refs/heads/main/assets/logo-dark.svg"
+  />
+  <source
+    media="(prefers-color-scheme: light)"
+    srcset="https://raw.githubusercontent.com/omss-spec/docs/refs/heads/main/assets/logo-light.svg"
+  />
   <img
-    src="https://raw.githubusercontent.com/omss-spec/graphics/HEAD/omss-landscape-outlined.svg"
+    src="https://raw.githubusercontent.com/omss-spec/docs/refs/heads/main/assets/logo-light.svg"
     width="500"
     height="auto"
     alt="OMSS Core"
   />
-  <br /><br />
--->
+</picture>
 
-</div>
-
-<div align="center">
+# Core
 
 [![CI](https://github.com/omss-spec/core/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/omss-spec/core/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/@omss/core.svg?style=flat)](https://www.npmjs.com/package/@omss/core)
@@ -89,13 +91,13 @@ Do you want to know more? Check out the [documentation](https://omss.mintlify.si
 
 ## Features
 
-- **Modular by design** — the core ships with almost no functionality. Everything is a plugin.
-- **OMSS Lifecycle** - use hooks to get notified of OMSS lifecycle events. 
-- **Fully typed** — built in TypeScript with full type exports for **Everything** (no `any` used!)
+- **Modular by design**: The core ships with almost no functionality. Everything is a plugin.
+- **OMSS Lifecycle**: Use hooks to get notified of OMSS lifecycle events. 
+- **Fully typed**: Built in TypeScript with full type exports for **Everything** (no `any` used!)
 - **Extensible**: OMSS Core is fully extensible via its hooks, plugins, and decorators.
-- **Middleware support** — certain services expose middleware chains that plugins can extend (e.g., caching layers).
-- **Developer friendly**: the framework is built to be very expressive and help developers in their daily use without sacrificing performance.
-- **Standards-compliant** — built with the [OMSS Specification](https://github.com/omss-spec/omss-spec) in mind.
+- **Middleware support**: Certain services expose middleware chains that plugins can extend (e.g., caching layers).
+- **Developer friendly**: The framework is built to be very expressive and help developers in their daily use without sacrificing performance.
+- **Standards-compliant**: Built with the [OMSS Specification](https://github.com/omss-spec/omss-spec) in mind.
 
 
 ## Documentation _(coming soon)_

package/SECURITY.md

@@ -0,0 +1,39 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest version of the OMSS specification is supported.
+
+Once the project reaches a stable release, a proper Long Term Support (LTS) matrix will be published here.
+
+## Reporting a Vulnerability
+
+The OMSS team takes security seriously. We appreciate your effort to responsibly disclose vulnerabilities.
+
+**Please do NOT open a public GitHub issue for security vulnerabilities.**
+
+To report a vulnerability, please use one of the following methods:
+
+- **GitHub Security Advisories:** [Report a vulnerability privately](https://github.com/omss-spec/core/security/advisories/new) via GitHub's private reporting feature.
+
+### What to include
+
+Please include as much of the following information as possible:
+
+- Type of vulnerability (e.g., injection, privilege escalation, information disclosure)
+- Full paths of the affected source file(s)
+- Location of the affected code (tag/branch/commit or direct URL)
+- Any special configuration required to reproduce the issue
+- Step-by-step instructions to reproduce the issue
+- Proof-of-concept or exploit code (if possible)
+- Impact of the vulnerability and how an attacker might exploit it
+
+### Response timeline
+
+We will acknowledge receipt of your report within **72 hours** and aim to provide an initial assessment within **10 business days**.
+
+We will keep you informed of our progress and notify you when a fix is released. We kindly ask that you refrain from disclosing the vulnerability publicly until a fix has been released.
+
+## Security Acknowledgements
+
+We thank all security researchers who have responsibly disclosed vulnerabilities to us. Acknowledged contributors will be listed here upon their consent.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@omss/core",
-    "version": "0.0.2-beta.2",
+    "version": "0.0.2-beta.3",
     "description": "Official TypeScript runtime and plugin orchestrator to create all kinds of OMSS based services!",
     "type": "module",
     "main": "./dist/index.cjs",
@@ -19,7 +19,10 @@
         }
     },
     "files": [
-        "dist"
+        "dist",
+        "README.md",
+        "SECURITY.md",
+        "LICENSE"
     ],
     "scripts": {
         "build": "tsdown",