pi-spotify-widget 0.1.9 → 0.1.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/SECURITY.md +20 -0
- package/package.json +5 -4
package/CHANGELOG.md
CHANGED
package/SECURITY.md
ADDED
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Supported versions
|
|
4
|
+
|
|
5
|
+
Only the latest published version receives security fixes.
|
|
6
|
+
|
|
7
|
+
## Reporting a vulnerability
|
|
8
|
+
|
|
9
|
+
Open a private security advisory on GitHub, or contact the maintainer by the preferred channel listed in the repository profile.
|
|
10
|
+
|
|
11
|
+
Please include:
|
|
12
|
+
|
|
13
|
+
- Affected version
|
|
14
|
+
- Impact
|
|
15
|
+
- Reproduction steps
|
|
16
|
+
- Suggested fix, if known
|
|
17
|
+
|
|
18
|
+
## Pi package security note
|
|
19
|
+
|
|
20
|
+
Pi packages can execute code with local user permissions. Review installed packages and avoid running untrusted extensions.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pi-spotify-widget",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.10",
|
|
4
4
|
"description": "Lightweight Spotify Now Playing widget for Pi Coding Agent.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
@@ -24,6 +24,7 @@
|
|
|
24
24
|
"lib/",
|
|
25
25
|
"docs/",
|
|
26
26
|
"README.md",
|
|
27
|
+
"SECURITY.md",
|
|
27
28
|
"LICENSE",
|
|
28
29
|
"CHANGELOG.md",
|
|
29
30
|
"skills/"
|
|
@@ -53,11 +54,11 @@
|
|
|
53
54
|
"typebox": "*"
|
|
54
55
|
},
|
|
55
56
|
"devDependencies": {
|
|
56
|
-
"@earendil-works/pi-ai": "^0.
|
|
57
|
-
"@earendil-works/pi-coding-agent": "^0.
|
|
57
|
+
"@earendil-works/pi-ai": "^0.84.1",
|
|
58
|
+
"@earendil-works/pi-coding-agent": "^0.84.1",
|
|
58
59
|
"@earendil-works/pi-tui": "latest",
|
|
59
60
|
"typebox": "latest",
|
|
60
61
|
"@types/node": "^26.0.0",
|
|
61
|
-
"typescript": "^
|
|
62
|
+
"typescript": "^7.0.2"
|
|
62
63
|
}
|
|
63
64
|
}
|