memorio 4.4.0 → 4.5.3

package/SECURITY.md

@@ -1,48 +1,48 @@
-# Security
-
-Memorio follows NIST and NSA security standards at the enterprise level.
-
-## Security Standards
-
-- **NIST Guidelines**: Follows NIST SP 800-53 security controls and NIST Cybersecurity Framework
-- **NSA Standards**: Defense-grade security practices; considers nation-state level threats in risk assessment
-
-## Supply Chain Security
-
-- **Socket.dev**: Minimum target score 90%; all alarms must be resolved before release
-- **Dependency Management**: Zero production dependencies (fully dependency-free); dev dependencies audited regularly
-- **Prohibited**: No `eval()` usage, no encrypted/obfuscated code in builds, no hardcoded secrets
-
-## Code Security
-
-- No hardcoded credentials or API keys
-- Secure random session ID generation (`crypto.randomUUID` → `crypto.getRandomValues` → fallback)
-- Input validation on all public APIs
-- XSS prevention on DevTools data export
-- Property-based access control on global objects (`Object.defineProperty` with `enumerable: false`)
-
-## OWASP Compliance
-
-Addresses OWASP Top 10 (2021):
-- A01:2021 — Broken Access Control (global object protection, property locks)
-- A02:2021 — Cryptographic Failures (crypto.randomUUID for session IDs)
-- A03:2021 — Injection (CSS sanitization in devtools)
-- A05:2021 — Security Misconfiguration (minimal surface area, no bundled secrets)
-- A06:2021 — Vulnerable and Outdated Components (regular npm audit, Socket.dev)
-- A07:2021 — Identification and Authentication Failures (N/A — library, no auth)
-- A08:2021 — Software and Data Integrity Failures (strict tsconfig, lock files)
-- A09:2021 — Security Logging and Monitoring Failures (DevTools inspect, Logger module)
-- A10:2021 — Server-Side Request Forgery (N/A — no network requests)
-
-## Reporting Security Issues
-
-If you find a security vulnerability:
-
-1. Email [Dario Passariello](mailto:dariopassarielloa@gmail.com)
-2. Or visit https://dario.passariello.ca/contact/
-
-Do not open public issues for security vulnerabilities.
-
----
-*Document version: 2.0 — Last updated: 2026-05-19*
-*Owner: BigLogic Security Team*
+# Security
+
+Memorio follows NIST and NSA security standards at the enterprise level.
+
+## Security Standards
+
+- **NIST Guidelines**: Follows NIST SP 800-53 security controls and NIST Cybersecurity Framework
+- **NSA Standards**: Defense-grade security practices; considers nation-state level threats in risk assessment
+
+## Supply Chain Security
+
+- **Socket.dev**: Minimum target score 90%; all alarms must be resolved before release
+- **Dependency Management**: Zero production dependencies (fully dependency-free); dev dependencies audited regularly
+- **Prohibited**: No `eval()` usage, no encrypted/obfuscated code in builds, no hardcoded secrets
+
+## Code Security
+
+- No hardcoded credentials or API keys
+- Secure random session ID generation (`crypto.randomUUID` → `crypto.getRandomValues` → fallback)
+- Input validation on all public APIs
+- XSS prevention on DevTools data export
+- Property-based access control on global objects (`Object.defineProperty` with `enumerable: false`)
+
+## OWASP Compliance
+
+Addresses OWASP Top 10 (2021):
+- A01:2021 — Broken Access Control (global object protection, property locks)
+- A02:2021 — Cryptographic Failures (crypto.randomUUID for session IDs)
+- A03:2021 — Injection (CSS sanitization in devtools)
+- A05:2021 — Security Misconfiguration (minimal surface area, no bundled secrets)
+- A06:2021 — Vulnerable and Outdated Components (regular npm audit, Socket.dev)
+- A07:2021 — Identification and Authentication Failures (N/A — library, no auth)
+- A08:2021 — Software and Data Integrity Failures (strict tsconfig, lock files)
+- A09:2021 — Security Logging and Monitoring Failures (DevTools inspect, Logger module)
+- A10:2021 — Server-Side Request Forgery (N/A — no network requests)
+
+## Reporting Security Issues
+
+If you find a security vulnerability:
+
+1. Email [Dario Passariello](mailto:dariopassarielloa@gmail.com)
+2. Or visit https://dario.passariello.ca/contact/
+
+Do not open public issues for security vulnerabilities.
+
+---
+*Document version: 2.0 — Last updated: 2026-05-19*
+*Owner: BigLogic Security Team*

package/index.cjs

@@ -1,5 +1,3 @@
-"use strict";
-
 var e = Object.getOwnPropertyNames, o = (o, t) => function() {
     return o && (t = (0, o[e(o)[0]])(o = 0)), t;
 }, t = {}, r = o({
@@ -317,7 +315,7 @@ function J(e) {
     };
 }
 
-var z = "4.4.0";
+var z = "4.5.3";
 
 Object.defineProperty(globalThis, "memorio", {
     value: {

package/index.js

@@ -315,7 +315,7 @@ function J(e) {
     };
 }
 
-var z = "4.4.0";
+var z = "4.5.3";
 
 Object.defineProperty(globalThis, "memorio", {
     value: {

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "memorio",
   "codeName": "memorio",
-  "version": "4.4.0",
+  "version": "4.5.3",
   "description": "Memorio, State + Observer, Store and iDB for an easy life - Cross-platform compatible",
   "main": "./index.cjs",
-  "browser": "./index.cjs",
+  "browser": "./index.js",
   "module": "./index.js",
+  "type": "module",
   "types": "./index.d.ts",
   "typing": "./types/*",
   "license": "MIT",
@@ -50,6 +51,10 @@
   "files": [
     "**/*"
   ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": true,
   "support": {
     "name": "Dario Passariello",
     "url": "https://dario.passariello.ca/",

package/types/store.d.ts

@@ -13,7 +13,7 @@ interface _store {
      * @param name The String as name to define the store.
      * @param value The information you want to store. Functions are blocked for security.
      * @return void
-     */
+     */
   set: (name: string, value: any) => void
 
   /**