lobsterboard 0.2.3 → 0.2.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +31 -1
- package/README.md +7 -0
- package/dist/lobsterboard.css +1 -1
- package/dist/lobsterboard.esm.js +1 -1
- package/dist/lobsterboard.esm.min.js +1 -1
- package/dist/lobsterboard.umd.js +1 -1
- package/dist/lobsterboard.umd.min.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,36 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
-
## [0.2.
|
|
3
|
+
## [0.2.3] - 2026-02-16
|
|
4
|
+
|
|
5
|
+
### Added
|
|
6
|
+
- **PIN-locked edit mode** — set a 4-6 digit PIN to prevent unauthorized editing (SHA-256 hashed, server-side only)
|
|
7
|
+
- **Server-side secrets store** — API keys, calendar URLs, and tokens stored in `secrets.json`, never sent to browser
|
|
8
|
+
- **Public Mode** — hides edit button and blocks config APIs; subtle 🔒 unlock button for admin access
|
|
9
|
+
- **Privacy warnings** on sensitive widgets (System Log, Activity List, Cron Jobs, Calendar, Todo List) — ⚠️ badge in widget panel + orange warning in properties panel
|
|
10
|
+
- **Community Widgets** — contribution guide, templates, and PR checklist for community widget submissions
|
|
11
|
+
|
|
12
|
+
### Fixed
|
|
13
|
+
- Private calendar URLs (Google Calendar, iCloud CalDAV) no longer leak in template exports
|
|
14
|
+
- Template export `stripSensitive()` now detects URLs with auth tokens
|
|
15
|
+
- Public mode toggle uses masked PIN modal instead of plain-text `prompt()`
|
|
16
|
+
- `closePinModal()` no longer kills pending callbacks
|
|
17
|
+
|
|
18
|
+
### Security
|
|
19
|
+
- `auth.json` and `secrets.json` added to `.gitignore`
|
|
20
|
+
- Pre-commit hook blocks private data patterns in template files
|
|
21
|
+
|
|
22
|
+
## [0.2.2] - 2026-02-16
|
|
23
|
+
|
|
24
|
+
### Fixed
|
|
25
|
+
- Removed private Google Calendar URL accidentally included in template config
|
|
26
|
+
- Fixed `stripSensitive()` to detect and blank URLs with embedded auth tokens
|
|
27
|
+
|
|
28
|
+
## [0.2.1] - 2026-02-15
|
|
29
|
+
|
|
30
|
+
### Fixed
|
|
31
|
+
- Minor bug fixes and stability improvements
|
|
32
|
+
|
|
33
|
+
## [0.2.0] - 2026-02-15
|
|
4
34
|
|
|
5
35
|
### Added
|
|
6
36
|
- **Template Gallery** — export, import, and share dashboard layouts with auto-screenshot previews
|
package/README.md
CHANGED
|
@@ -275,6 +275,13 @@ lobsterboard/
|
|
|
275
275
|
└── package.json
|
|
276
276
|
```
|
|
277
277
|
|
|
278
|
+
## Community Widgets
|
|
279
|
+
|
|
280
|
+
Community contributions are welcome! Build your own widget and share it with the LobsterBoard community.
|
|
281
|
+
|
|
282
|
+
- 📖 **[Contributing Guide](CONTRIBUTING.md)** — how to create and submit a widget
|
|
283
|
+
- 📁 **[Community Widgets](community-widgets/)** — browse contributed widgets and the starter template
|
|
284
|
+
|
|
278
285
|
## License
|
|
279
286
|
|
|
280
287
|
This project is licensed under the **Business Source License 1.1 (BSL-1.1)**.
|
package/dist/lobsterboard.css
CHANGED
package/dist/lobsterboard.esm.js
CHANGED
package/dist/lobsterboard.umd.js
CHANGED
package/package.json
CHANGED