npmx Integrates OpenSearch and Security Auditing
OpenSearch and Browser Integration
Implemented OpenSearch support, enabling browsers to use npmx as a native search engine. The integration includes a suggestions API for real-time autocomplete in the address bar and specific header fixes to ensure XML parsing compatibility on Vercel.
Security and Version Auditing
Introduced automated detection of installation scripts (pre/post-install) with warning indicators for potential security risks. The system now extracts hidden runtime dependencies invoked via npx and provides clear UI notices for deprecated packages and versions.
URL Routing and SemVer Resolution
Enhanced routing logic to support complex URL patterns like `/package@version` and semver ranges (e.g., `/vue/v/^1`). This update improves the DX for power users navigating directly to specific module states.
UI Accessibility and Keyboard Shortcuts
Achieved a 100% Lighthouse accessibility score target by increasing touch targets and refining component contrast. Added a '.' (dot) keyboard shortcut to quickly jump to a package's code view and added a clear icon to the search input.
Infrastructure and Layout Fixes
Resolved several high-priority bugs, including a Firefox-specific footer visibility issue and a CORS configuration error in the connector CLI that prevented authentication on non-standard localhost ports. Updated the org and package views to utilize full container width.