From a206569a01a1f93b1c4fa284d0849fa4c7a8faad Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 29 Jan 2026 04:21:22 +0000 Subject: [PATCH] fix: correct documentation inaccuracies - Fix polyfill.io impact: 100K+ sites not 100M+ (per Sansec report) - Update SECURITY.md version table from 0.1.x to 1.0.x - Update SECURITY.md known limitations to reference v1.0 - Update examples/README.md: Next.js 15 -> 16, Vite 6 -> 7 https://claude.ai/code/session_015MUvU7bv3vAxkPkW4oUdGm --- README.md | 2 +- SECURITY.md | 4 ++-- examples/README.md | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 7d14089..b452648 100644 --- a/README.md +++ b/README.md @@ -42,7 +42,7 @@ Loading large files in the browser is painful: 1. **Memory explosion** - `crypto.subtle.digest()` buffers the entire file. 4GB AI model = 4GB+ RAM = browser crash. 2. **No fail-fast** - Download 4GB, find corruption at the end, start over. -3. **CDN compromises** - [polyfill.io](https://sansec.io/research/polyfill-supply-chain-attack) affected 100M+ sites. +3. **CDN compromises** - [polyfill.io](https://sansec.io/research/polyfill-supply-chain-attack) affected 100K+ sites. ### The Solution diff --git a/SECURITY.md b/SECURITY.md index a75218a..458d764 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,7 +4,7 @@ | Version | Supported | | ------- | ------------------ | -| 0.1.x | :white_check_mark: | +| 1.0.x | :white_check_mark: | ## Reporting a Vulnerability @@ -55,5 +55,5 @@ When using VerifyFetch: ## Known Limitations -- v0.1 supports hash verification only (signature verification coming in v0.2) +- v1.0 supports hash verification only (signature verification planned for future release) - SubtleCrypto fallback loads entire file into memory (use WASM for large files) diff --git a/examples/README.md b/examples/README.md index b90743b..7a6bb83 100644 --- a/examples/README.md +++ b/examples/README.md @@ -7,8 +7,8 @@ This folder contains example projects demonstrating how to use VerifyFetch in di | Example | Description | Technologies | |---------|-------------|--------------| | [node-cli](./node-cli/) | Command-line usage in Node.js | Node.js, ESM | -| [next-app](./next-app/) | React app with custom hook | Next.js 15, React 19 | -| [vite-app](./vite-app/) | Vanilla TypeScript web app | Vite 6, TypeScript | +| [next-app](./next-app/) | React app with custom hook | Next.js 16, React 19 | +| [vite-app](./vite-app/) | Vanilla TypeScript web app | Vite 7, TypeScript | ## Running the Examples