slotlock 0.6.1 → 0.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/SECURITY.md +15 -4
- package/dashboard.js +1 -1
- package/package.json +1 -1
- package/slotlock.manifest.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -3,6 +3,15 @@
|
|
|
3
3
|
All notable changes follow [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and semantic
|
|
4
4
|
versioning.
|
|
5
5
|
|
|
6
|
+
## 0.6.2 - 2026-11-08
|
|
7
|
+
|
|
8
|
+
### Changed
|
|
9
|
+
|
|
10
|
+
- Dashboard: pages use the width of a wide screen, up to 1600px, and centre past it, instead of
|
|
11
|
+
stopping at 1200px against the sidebar with empty space to their right.
|
|
12
|
+
- SECURITY.md: the hosted service is open, and security research on it is welcome against your own
|
|
13
|
+
account, within the rules it gives (no load testing, no other accounts' data).
|
|
14
|
+
|
|
6
15
|
## 0.6.1 - 2026-11-08
|
|
7
16
|
|
|
8
17
|
### Changed
|
package/SECURITY.md
CHANGED
|
@@ -24,10 +24,21 @@ are published as advisories at <https://github.com/PILOTAAI/slotlock/security/ad
|
|
|
24
24
|
|
|
25
25
|
## Hosted Slotlock
|
|
26
26
|
|
|
27
|
-
The hosted service is
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
27
|
+
The hosted service is open: any GitHub account can sign in at
|
|
28
|
+
<https://app.slotlock.pylota.io/dashboard> and use `https://slotlock-api.pylota.io` with its own
|
|
29
|
+
keys. Self-hosting stays fully supported. Security research on the hosted service is welcome within
|
|
30
|
+
these rules:
|
|
31
|
+
|
|
32
|
+
- Test only against an account you signed in with yourself, and only with its own keys. Stop as
|
|
33
|
+
soon as you reach another account's data, keep none of it, and report it.
|
|
34
|
+
- No traffic meant to slow or stop the service: no floods, load tests, or recurrence rules written
|
|
35
|
+
to expand without end. A request over a limit gets `429`; do not try to get around the limits.
|
|
36
|
+
Run Slotlock yourself to load test it.
|
|
37
|
+
- No social engineering, and no attacks on Pylota's people, offices, GitHub, Cloudflare, or other
|
|
38
|
+
providers.
|
|
39
|
+
- Report privately as above, never in a public issue, and give us time to fix it before disclosure.
|
|
40
|
+
|
|
41
|
+
The [Acceptable Use Policy](ACCEPTABLE-USE.md) permits research within these rules. Abuse of the service by others goes to [abuse@pylota.io](mailto:abuse@pylota.io).
|
|
31
42
|
|
|
32
43
|
## Security model
|
|
33
44
|
|
package/dashboard.js
CHANGED
|
@@ -2644,7 +2644,7 @@ code, pre, kbd, input[readonly] { font-family: var(--mono); font-size: 12.5px; }
|
|
|
2644
2644
|
.me form { margin: 0 0 0 auto; }
|
|
2645
2645
|
.login { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; }
|
|
2646
2646
|
.sign-out .icon { width: 15px; height: 15px; }
|
|
2647
|
-
.page { width: 100%; max-width:
|
|
2647
|
+
.page { width: 100%; max-width: 1600px; margin-inline: auto; padding: var(--space-8) var(--space-8) 72px; display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--space-5); align-content: start; min-width: 0; }
|
|
2648
2648
|
.page-head { display: flex; align-items: center; justify-content: space-between; gap: var(--space-3); flex-wrap: wrap; min-height: 36px; margin-bottom: var(--space-1); }
|
|
2649
2649
|
|
|
2650
2650
|
/* Type */
|
package/package.json
CHANGED
package/slotlock.manifest.json
CHANGED