| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 5.0.0-beta4 source code.tar.gz | 2026-07-23 | 1.2 MB | |
| 5.0.0-beta4 source code.zip | 2026-07-23 | 2.0 MB | |
| README.md | 2026-07-23 | 768 Bytes | |
| Totals: 3 Items | 3.2 MB | 2 | |
- Critical GraphQL auth/security hardening:
- JWTs are now signature-verified (
HS256) instead of decoded without verification. - Auth context token wiring was corrected.
- Protected resolver auth checks now fail closed for account and dataset operations.
- Added server regression tests for:
- unsigned/invalid JWT rejection
- unauthenticated denial of
createUserAccount,deleteAccount, anddeleteDataSet - Fixed monorepo build stability:
- i18n TypeScript/Node typing config updated to restore successful root builds.
- Release docs clarified:
- GitHub tag/release is the default workflow.
- npm publish is documented as optional.
- No user-facing feature additions; this update is security, stability, and release-process cleanup.