v1.13.0 – Privacy, Policy, and Polish
This release introduces OpenPGP publishing under the new /pgp
route, expands .well-known/
disclosures, and applies a consistent formatting baseline across the project.
✨ Added
/pgp
Route: Displays PGP key data, QR codes, and download links for secure communication.well-known/security.txt
: Official security contact, policy, and PGP fingerprint published in standard format.well-known/humans.txt
: Minimal contributor acknowledgment for human-readable attribution- GitHub Actions:
check-security-txt-expiry.yml
Warns when.well-known/security.txt
is approaching expiration
🔧 Changed
- Prettier: Enforced
"singleQuote": true
across the codebase and reformatted all affected files - Content Security Policy: Enabled
clipboard-write
to support “Copy fingerprint” UX - Service Worker: Updated to exclude
security.txt.asc
from caching - Proton Mail Disclosure: Added notes to
SECURITY.md
andsecurity.txt
indicating E2EE availability fors.neteng.pro
addresses - PGP UX: Improved fingerprint layout and accessibility in
/pgp
📁 Internal
- Cleaned up outdated notes in
SECURITY.md
referencing future PGP additions (now live) - Bumped version in
package.json
to1.13.0
See the changelog for full details.