sotashimozono_obsidian-remo.../plugin/versions.json
Souta b6a5d735d0 chore: add LICENSE + SECURITY.md + CONTRIBUTING.md (0.4.58)
OSS hygiene baseline. Three new repo-root files; no source code
touched.

- **LICENSE** (MIT) — declared in package.json since day one but
  the file itself was missing. Required for community-store
  registry submission (#126 Phase H), required by GitHub's "is
  this project licensed?" detection, required by Dependabot's
  license-compatibility check.

- **SECURITY.md** — vulnerability disclosure policy. The plugin
  handles SSH credentials and auto-deploys a remote daemon, so
  the attack surface is non-trivial and a clear "open a private
  Security Advisory, not a public issue" instruction matters.
  Documents the existing cosign verification command (D-δ.2 /
  F24 / #122) and the runtime sha256 verify (D-δ.1 / F23 / #121).

- **CONTRIBUTING.md** — dev setup, branch naming, Conventional
  Commits format (already enforced by commitlint #111), version-
  bump dance, where each kind of decision lives in `docs/`.
  Mirrors the conventions every recent merged PR has followed,
  so the doc captures lived practice rather than aspirational
  rules.

Code of Conduct intentionally omitted at this stage — single-
author repo, will revisit if external contributions accumulate.
README is touched in a separate uncommitted edit (souta is
working on it in the IDE) and stays out of this PR.

Verification:

- All three files render on GitHub's repo-root rendering
  conventions (LICENSE picked up automatically by the
  "License: MIT" header; SECURITY.md surfaces a "Report a
  vulnerability" button; CONTRIBUTING.md surfaces in the PR
  template).
- No code change → no test surface impacted; existing 569 tests
  still green by virtue of not touching anything.

manifest/package/versions bumped 0.4.57 → 0.4.58.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-29 10:32:52 +09:00

66 lines
1.3 KiB
JSON

{
"0.1.0": "1.4.0",
"0.2.0": "1.4.0",
"0.3.0": "1.4.0",
"0.3.1": "1.4.0",
"0.3.2": "1.4.0",
"0.4.0": "1.4.0",
"0.4.1": "1.4.0",
"0.4.2": "1.4.0",
"0.4.3": "1.4.0",
"0.4.4": "1.4.0",
"0.4.5": "1.4.0",
"0.4.6": "1.4.0",
"0.4.7": "1.4.0",
"0.4.8": "1.4.0",
"0.4.9": "1.4.0",
"0.4.10": "1.4.0",
"0.4.11": "1.4.0",
"0.4.12": "1.4.0",
"0.4.13": "1.4.0",
"0.4.14": "1.4.0",
"0.4.15": "1.4.0",
"0.4.16": "1.4.0",
"0.4.17": "1.4.0",
"0.4.18": "1.4.0",
"0.4.19": "1.4.0",
"0.4.20": "1.4.0",
"0.4.21": "1.4.0",
"0.4.22": "1.4.0",
"0.4.23": "1.4.0",
"0.4.24": "1.4.0",
"0.4.25": "1.4.0",
"0.4.26": "1.4.0",
"0.4.27": "1.4.0",
"0.4.28": "1.4.0",
"0.4.29": "1.4.0",
"0.4.30": "1.4.0",
"0.4.31": "1.4.0",
"0.4.32": "1.4.0",
"0.4.33": "1.4.0",
"0.4.34": "1.4.0",
"0.4.35": "1.4.0",
"0.4.36": "1.4.0",
"0.4.37": "1.4.0",
"0.4.38": "1.4.0",
"0.4.39": "1.4.0",
"0.4.40": "1.4.0",
"0.4.41": "1.4.0",
"0.4.42": "1.4.0",
"0.4.43": "1.4.0",
"0.4.44": "1.4.0",
"0.4.45": "1.4.0",
"0.4.46": "1.4.0",
"0.4.47": "1.4.0",
"0.4.48": "1.4.0",
"0.4.49": "1.4.0",
"0.4.50": "1.4.0",
"0.4.51": "1.4.0",
"0.4.52": "1.4.0",
"0.4.53": "1.4.0",
"0.4.54": "1.4.0",
"0.4.55": "1.4.0",
"0.4.56": "1.4.0",
"0.4.57": "1.4.0",
"0.4.58": "1.4.0"
}