mirror of
https://github.com/signerless/llm-checker.git
synced 2026-09-02 21:24:41 +00:00
ccd9044fbc
Critical: - Replace eval() with safe Function constructor in update-models.js - Add path traversal guard to plugin loader - Add security warning for code plugin execution High: - Replace all non-functional timeout options with AbortController (6 fetch calls) - Fix race condition in availability cache with in-flight promise dedup - Fix pullModel stream not detecting errors or incomplete streams - Fix unbounded memory accumulation in native-scraper response handler - Make bin/enhanced_cli.js executable Medium: - Fix package name mismatch: rename to llm-checker, keep ollama-checker alias - Add proper .npmignore to exclude tests, scripts, logo, ml-model - Validate parseInt results for environment variable overrides (NaN guard) - Add forceFresh parameter to hardware cache bypass - Add package-lock.json for reproducible builds - Trim files field to exclude ml-model and extra docs from npm package Code quality: - Remove 143 lines of unreachable dead code in src/index.js - Bound ReDoS-prone [\s\S]*? regex patterns with length limits - Fix test script to use actual test runner instead of jest Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| benchmark.js | ||
| setup.sh | ||
| update-models.js | ||