zengate 1.0.2 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -2
- package/package.json +6 -3
package/README.md
CHANGED
|
@@ -3,7 +3,8 @@
|
|
|
3
3
|
[](https://github.com/developingchet/zengate/actions/workflows/ci.yml)
|
|
4
4
|
[](https://www.npmjs.com/package/zengate)
|
|
5
5
|
[](https://hub.docker.com/r/developingchet/zengate)
|
|
6
|
-
[](https://socket.dev/npm/package/zengate/overview/latest)
|
|
7
|
+
[](https://scorecard.dev/viewer/?uri=github.com/developingchet/zengate)
|
|
7
8
|
[](LICENSE)
|
|
8
9
|
|
|
9
10
|
An **OpenAI-compatible API for OpenCode's free Zen models: no Zen account or upstream API key needed.**
|
|
@@ -248,7 +249,14 @@ cosign verify developingchet/zengate:1 \
|
|
|
248
249
|
--certificate-oidc-issuer https://token.actions.githubusercontent.com
|
|
249
250
|
```
|
|
250
251
|
|
|
251
|
-
npm releases are published from GitHub Actions with [provenance](https://docs.npmjs.com/generating-provenance-statements); `npm audit signatures` checks it. Each GitHub release also lists SHA-256 checksums.
|
|
252
|
+
npm releases are published from GitHub Actions with [provenance](https://docs.npmjs.com/generating-provenance-statements); `npm audit signatures` checks it. Each GitHub release also lists SHA-256 checksums. From 1.0.4, `checksums.txt` and the package tarball are signed with cosign too:
|
|
253
|
+
|
|
254
|
+
```bash
|
|
255
|
+
cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
|
|
256
|
+
--certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
|
|
257
|
+
--certificate-oidc-issuer https://token.actions.githubusercontent.com
|
|
258
|
+
sha256sum -c checksums.txt
|
|
259
|
+
```
|
|
252
260
|
|
|
253
261
|
## Security
|
|
254
262
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "zengate",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.4",
|
|
4
4
|
"description": "Keyless OpenAI-compatible API (Chat Completions + Responses) for OpenCode's free Zen models, served through the real OpenCode CLI.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "developingchet",
|
|
@@ -29,8 +29,8 @@
|
|
|
29
29
|
"start": "node index.js",
|
|
30
30
|
"setup": "node scripts/setup.mjs",
|
|
31
31
|
"lint": "node scripts/quality.mjs",
|
|
32
|
-
"test": "node --test \"test/**/*.test.mjs\"",
|
|
33
|
-
"test:coverage": "node --test --experimental-test-coverage \"test/**/*.test.mjs\"",
|
|
32
|
+
"test": "node --test \"test/**/*.test.mjs\" \"test/**/*.test.js\"",
|
|
33
|
+
"test:coverage": "node --test --experimental-test-coverage \"test/**/*.test.mjs\" \"test/**/*.test.js\"",
|
|
34
34
|
"test:live": "node scripts/live-e2e.mjs",
|
|
35
35
|
"verify": "npm run lint && npm test",
|
|
36
36
|
"audit": "npm audit --omit=dev --audit-level=high"
|
|
@@ -61,5 +61,8 @@
|
|
|
61
61
|
},
|
|
62
62
|
"engines": {
|
|
63
63
|
"node": ">=24.0.0"
|
|
64
|
+
},
|
|
65
|
+
"devDependencies": {
|
|
66
|
+
"fast-check": "^4.10.2"
|
|
64
67
|
}
|
|
65
68
|
}
|