| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-05-01 | 621 Bytes | |
| v0.6.0 source code.tar.gz | 2026-05-01 | 5.5 MB | |
| v0.6.0 source code.zip | 2026-05-01 | 5.6 MB | |
| Totals: 3 Items | 11.1 MB | 0 | |
v0.6.0 — Security & Reliability Audit
Security
- JWT secret now reads from
JWT_SECRETorTSPOONBASE_JWT_SECRETenv var withapp.getJwtSecret()fallback chain - All auth code unified to use
app.getJwtSecret()instead ofappName || 'secret' - Encryption salt is now configurable via
TSPOONBASE_ENCRYPTION_KEYenv var - Removed
requirefrom JSVM sandbox to prevent hook escape - File upload path traversal sanitization on collection names
Reliability
- Graceful shutdown on SIGTERM/SIGINT/SIGHUP with WAL checkpoint
- Deep health check now verifies database connectivity (returns 503 if DB down)