form0-core 0.2.0 → 0.2.1

package/README.md

@@ -81,15 +81,6 @@ console.log(engine.getState());
 The engine API exposes `eval()` for calculations, conditions, and validation; `trigger()` for form
 events; and `getState()` for current values and evaluated field state.
 
-## 🔒 Security
-
-> [!CAUTION]
-> Schema expressions and event scripts execute JavaScript. Only evaluate schemas from authors you
-> trust. `SAFE` and `CUSTOM` modes provide validation controls; they are not security sandboxes.
-
-Read the [security policy](./SECURITY.md) before evaluating schemas outside a fully trusted
-authoring workflow.
-
 ## Schema and record ownership
 
 `form0-core` owns behavioral schema concerns such as fields, conditions, calculations, events, and
@@ -129,6 +120,15 @@ Record status remains top-level as `@status`; it is not stored inside `form_valu
 - [Core concepts](https://docs.form0.dev/core/concepts)
 - [Full documentation](https://docs.form0.dev)
 
+## 🔒 Security
+
+> [!CAUTION]
+> Schema expressions and event scripts execute JavaScript. Only evaluate schemas from authors you
+> trust. `SAFE` and `CUSTOM` modes provide validation controls; they are not security sandboxes.
+
+Read the [security policy](./SECURITY.md) before evaluating schemas outside a fully trusted
+authoring workflow.
+
 ## 🔗 Related repositories
 
 - [form0-cli](https://github.com/paqu-io/form0-cli) — recommended project entry point

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "form0-core",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },