@phala/pay-server 0.11.1 → 0.11.3

package/README.md

@@ -185,17 +185,20 @@ import { NetworkIcon, AssetIcon } from "@phala/pay-react";
 
 Import `@phala/pay-react/styles.css` for alignment. The default
 size is 18px. Icons use SVG width/height attributes and React elements, so they need no inline
-styles, data URI allowance, or extra CSP directives, including with `style-src 'self'`.
+styles, including with `style-src 'self'`. Each logo is a PNG embedded as a `data:` URI in an SVG
+`<image>`, so the page requests nothing for it; allow it with `img-src data:` in your CSP.
 
 Framework-free hosts can call `networkIcon(chainId)` or `assetIcon(symbol)` from `@phala/pay`
 for decorative SVG markup. Keep the
-name visible alongside it; when used alone, supply an accessible label on the host wrapper.
-
-Only six branded SVGs from `@web3icons/core@4.0.57` are vendored, under the MIT license in
-`THIRD_PARTY_NOTICES`. Regenerate both the markup and JSX modules with
-`npx -y pnpm@12.6.0 run icons:generate`; the script packs the pinned package into a temporary
-directory, rejects unexpected SVG tags/attributes, and cleans up. No web3icons runtime package
-is installed.
+name visible alongside it; when used alone, supply an accessible label on the host wrapper. Some
+logos are square images; `NetworkIcon` and `AssetIcon` draw every logo round, as CoinMarketCap
+does, and so does `border-radius: 50%` on your wrapper's `svg`.
+
+The logos are CoinMarketCap's 64px images: each token's own, and for a network the asset
+CoinMarketCap shows for it (Ethereum's is ETH's). They are vendored, not fetched at runtime, and
+are trademarks of their owners (`THIRD_PARTY_NOTICES`). Regenerate the core and React modules with
+`npx -y pnpm@12.6.0 run icons:generate` in `sdk/js`; the script downloads each image, rejects one
+whose SHA-256 differs from its pin, and checks that it is a 64x64 PNG.
 
 ## Development
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phala/pay-server",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "Phala Pay merchant server SDK",
   "license": "Apache-2.0",
   "homepage": "https://github.com/Phala-Network/phala-pay/tree/main/sdk/js-server#readme",
@@ -21,8 +21,7 @@
     }
   },
   "files": [
-    "dist",
-    "THIRD_PARTY_NOTICES"
+    "dist"
   ],
   "publishConfig": {
     "access": "public"

package/THIRD_PARTY_NOTICES

@@ -1,25 +0,0 @@
-web3icons (@web3icons/core@4.0.57)
-https://github.com/0xa3k5/web3icons
-Vendored branded token and network SVGs.
-
-MIT License
-
-Copyright (c) 2024 0xa3k5
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.