🛡️ VPN Config Security Filter

🚀 What’s new in v5.1

🛡️ Security improvements

✅ Thread safety — threading.Lock on health-tracking, correct operation with 5 parallel workers
✅ Port validation — ports 1–65535 are checked on all protocols
✅ Exact domain match — .cf no longer matches cfire.ru, only the TLD *.cf
✅ Fail-closed SSR — broken encoding = reject, not a silent pass
✅ VMess format-2 alterId — replay-attack protection for the new format
✅ pbk validation — length exactly 43 characters (X25519 public key)
✅ SS 2022 fail-closed — invalid base64 key = reject
✅ Post-quantum cryptography — validation of ML-KEM-768 + X25519 hybrids

⚡ Performance and UX

✅ LRU caching — @lru_cache for frequently used checks
✅ Parallel loading — ThreadPoolExecutor for sources
✅ URL Health tracking — automatic skipping of dead sources (3+ consecutive failures)
✅ Base64 round-trip — decode → filter → encode
✅ QR codes with HTML index — convenient on mobile
✅ Multi-protocol per endpoint — host:port:proto triple, does not cut valid combinations
✅ **RAW_BASE…

score = signal / reach signal = 0.25·commit_velocity // commits in last 90 days (cap 30) + 0.20·contributor_work // unique authors × velocity (cap 100) + 0.20·issue_resolution // closed ÷ total issues + 0.20·fork_ratio // forks ÷ stars (proxy for real usage) + 0.10·release_cadence // releases in 90 days (cap 3) + age_bonus // +0 to +0.30 after 6 months + homepage_bonus // +0.05 if homepage is set reach = log₁₀(stars + watchers + 10)█

health = 0.35·recency // days since last commit (90d decay) + 0.25·cadence // commit rhythm consistency + 0.20·issue_health // closed ÷ total issues + 0.20·pr_health // merged ÷ total PRs█

Healthy 80 – 100 active, responsive, regular releases Stable 60 – 79 maintained, steady, no alarms Quiet 40 – 59 slowing down — watch this one At Risk 0 – 39 going dark · candidate for rescue█

solo_builder one person holds > 80% of commits (last 180d) needs_contributors has open "help wanted" or "good first issue" labels hidden_gem < 100 stars · active in last 3 months · documented legacy_hero repo > 5 years old · committed this year fork_magnet forks/stars > 0.5 · used as template or dependency release_machine 5+ releases in the last 90 days under_pressure > 10 open issues · ≤ 2 contributors · health ≥ 60 community_watch watchers > stars · devs tracking before the public community_hub GitHub Discussions enabled · > 20 discussions funded maintainer has active funding channel█