MulmoClaude

v@mulmobridge/[email protected] Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 6d LLM Frameworks

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Graduates to version 1.0.0, adding Meta (Messenger/WhatsApp) webhook verification.

Full changelog

Graduates to 1.0.0.

Adds Meta (Messenger / WhatsApp) webhook verification, consolidated from two byte-identical bridge copies:

narrowChallenge(raw) + SAFE_CHALLENGE_RE — the CodeQL js/reflected-xss sanitiser that narrows Meta's hub.challenge to a known base64url-nonce shape before it's echoed back.

Existing since 0.1.0: createWebhookApp, createWebhookRateLimit, configureTrustProxy, verifyHmacSignature.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track MulmoClaude

Get notified when new releases ship.

About MulmoClaude

v1.1.1 Moves Google token store to ~/.config/mulmo/google-token.json
v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.