json-from-llm 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres
 to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.2] - 2026-06-04
+
+### Changed
+
+- Updated vulnerable development tooling and added CodeQL, OpenSSF Scorecard,
+  pinned GitHub Actions, least-privilege workflow permissions, Dependabot config
+  and a Scorecard README badge.
+
 ## [0.1.1] - 2026-06-04
 
 ### Changed

package/README.md

@@ -3,6 +3,7 @@
 [![npm version](https://img.shields.io/npm/v/json-from-llm.svg)](https://www.npmjs.com/package/json-from-llm)
 [![npm downloads](https://img.shields.io/npm/dm/json-from-llm.svg)](https://www.npmjs.com/package/json-from-llm)
 [![CI](https://github.com/slegarraga/json-from-llm/actions/workflows/ci.yml/badge.svg)](https://github.com/slegarraga/json-from-llm/actions/workflows/ci.yml)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/slegarraga/json-from-llm/badge)](https://scorecard.dev/viewer/?uri=github.com/slegarraga/json-from-llm)
 [![license](https://img.shields.io/npm/l/json-from-llm.svg)](./LICENSE)
 [![zero dependencies](https://img.shields.io/badge/dependencies-0-brightgreen.svg)](./package.json)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "json-from-llm",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Extract valid JSON from an LLM response, even when it is wrapped in reasoning/thinking tags, markdown fences or prose. Zero dependencies.",
   "keywords": [
     "llm",
@@ -69,6 +69,6 @@
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",
     "typescript-eslint": "^8.60.0",
-    "vitest": "^2.1.8"
+    "vitest": "^4.1.8"
   }
 }