July 9th, 2026 · 1 commits
Login now requires a POST with Cloudflare Turnstile verification, blocking direct GETs and tightening the OAuth start flow.
Read the issue →
July 6th, 2026 · 2 commits
The repo now serves docs only for the newest package version and disables the diff UI, while also turning off Algolia symbol indexing.
Read the issue →
July 3rd, 2026 · 1 commits
jsr hardened provenance checks by storing publish-time tarball hashes and verifying attestations against the exact bytes released.
Read the issue →