@roboteby/parry 1.1.0-rc.1 → 1.1.1

package/CHANGELOG.md

@@ -8,12 +8,26 @@ without adding a changelog generation dependency.
 
 ## [Unreleased]
 
+## [1.1.0-rc.1] - 2026-07-02
+
 ### Added
 
-- Release workflow preparation.
-- npm package hardening.
-- Package tarball validation scripts.
+- Published the first npm release candidate as `@roboteby/parry@1.1.0-rc.1`
+  under the `rc` dist-tag.
+- Documented the release candidate installation path with
+  `npm install @roboteby/parry@rc`.
+- Added package hardening, release workflow documentation, and package tarball
+  validation scripts.
+- Included the current application-layer protection surface: route policies,
+  distributed rate limiting, BruteForceGuard, Threat Events, metrics, and the
+  read-only Admin API.
+- Added documentation for Admin API authentication modes, payload regression
+  testing, Docker demo usage, AWS reference infrastructure, and CI/CD.
 
 ### Security
 
-- Documented npm publishing and supply-chain hardening with Trusted Publishing/OIDC.
+- Documented npm publishing and supply-chain hardening with Trusted
+  Publishing/OIDC.
+- Clarified that Parry is application-layer Express middleware and does not
+  replace CloudFront, AWS WAF, Shield, Cloudflare, CDN, ALB, or edge-layer
+  volumetric DDoS protection.

package/README.md

@@ -1,4 +1,8 @@
-# parry-express-security-middleware
+# Parry
+
+[![npm rc version](https://img.shields.io/npm/v/@roboteby/parry/rc?label=npm%20rc)](https://www.npmjs.com/package/@roboteby/parry)
+[![license](https://img.shields.io/npm/l/@roboteby/parry)](https://github.com/RobotEby/parry-express-security-middleware/blob/main/LICENSE)
+[![node](https://img.shields.io/node/v/@roboteby/parry)](https://www.npmjs.com/package/@roboteby/parry)
 
 Application-layer security middleware for Express.js.
 
@@ -42,11 +46,15 @@ It is designed for development and production-like deployments:
 ## Installation
 
 ```bash
-npm install @roboteby/parry
+npm install @roboteby/parry@rc
 ```
 
 Parry expects Express to be installed by your application.
 
+## Release Candidate
+
+`@roboteby/parry@1.1.0-rc.1` is published on npm under the `rc` tag for validation before promotion to the stable `latest` channel. Use `npm install @roboteby/parry@rc` to test the release candidate, review detector behavior and Admin API configuration in your environment, and pin the exact version if you need reproducible rollout testing.
+
 ## Quick Start
 
 ```js
@@ -225,6 +233,12 @@ curl -X POST http://localhost:3000/echo \
 
 The `change-me` token is for local demos only.
 
+## cURL Guide
+
+The demo API can be validated with a set of local cURL examples covering health checks, Admin API authentication, Threat Events, brute-force blocks, active bans, CORS, request IDs, and frontend proxy checks.
+
+See [docs/curl-guide.md](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/curl-guide.md).
+
 ## Security Model
 
 Parry operates inside the Express application. It helps identify and block suspicious application-layer requests, but it does not replace edge and infrastructure controls.
@@ -247,6 +261,7 @@ Additional documentation is available in the repository:
 - [Admin API authentication](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/admin-api-auth.md)
 - [AWS Admin API authentication](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/aws-admin-auth.md)
 - [Docker demo](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/docker-demo.md)
+- [cURL guide](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/curl-guide.md)
 - [AWS infrastructure notes](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/aws-infra.md)
 - [CI/CD](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/ci-cd.md)
 - [Release process](https://github.com/RobotEby/parry-express-security-middleware/blob/main/docs/release.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@roboteby/parry",
-  "version": "1.1.0-rc.1",
+  "version": "1.1.1",
   "description": "Application-layer security middleware for Express.js with injection detection, abuse mitigation, brute-force protection and distributed rate limiting.",
   "main": "./src/index.js",
   "types": "./types/index.d.ts",