Skip to content

fix(ENG-12465): use absolute URLs for README images to fix npm display #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
hiskudin wants to merge 5 commits into from
Closed

fix(ENG-12465): use absolute URLs for README images to fix npm display #27

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
c393242
fix: upgrade ML classifier to jbv2 (AgentShield 73.7 → 79.8)
hiskudin Mar 24, 2026
8814745
chore(biome): add model files in biome ignore
hiskudin Mar 24, 2026
0ff4bed
chore(biome): add model files in biome ignore
hiskudin Mar 24, 2026
738787b
fix: use absolute URLs for README images to fix npm display
hiskudin Mar 26, 2026
18a1bd6
Merge branch 'main' into fix/readme-npm-image-paths
hiskudin Mar 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
<div align="center">

<picture>
<source media="(prefers-color-scheme: dark)" srcset="assets/banner-dark.svg" />
<img src="assets/banner-light.svg" alt="Defender by StackOne — Indirect prompt injection protection for MCP tool calls" width="800" />
<source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/banner-dark.svg" />
<img src="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/banner-light.svg" alt="Defender by StackOne — Indirect prompt injection protection for MCP tool calls" width="800" />
Comment on lines +4 to +5
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These image URLs are pinned to the main branch on GitHub. That makes the README for older published npm versions non-deterministic (images can change or break if assets move). Consider pinning to a release tag/commit SHA (or a CDN URL that includes a tag) so the npm README stays stable per package version.

Suggested change
<source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/banner-dark.svg" />
<img src="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/banner-light.svg" alt="Defender by StackOne — Indirect prompt injection protection for MCP tool calls" width="800" />
<source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/StackOneHQ/defender/v0.1.0/assets/banner-dark.svg" />
<img src="https://raw.githubusercontent.com/StackOneHQ/defender/v0.1.0/assets/banner-light.svg" alt="Defender by StackOne — Indirect prompt injection protection for MCP tool calls" width="800" />

Copilot uses AI. Check for mistakes.
</picture>

<p>
Expand Down Expand Up @@ -61,8 +61,8 @@ if (!result.allowed) {
## How It Works

<picture>
<source media="(prefers-color-scheme: dark)" srcset="assets/demo-dark.svg" />
<img src="assets/demo-light.svg" alt="Defender flow: a poisoned email with an injection payload is intercepted by @stackone/defender and blocked before reaching the LLM, with riskLevel: critical and tier2Score: 0.97" width="900" />
<source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/demo-dark.svg" />
<img src="https://raw.githubusercontent.com/StackOneHQ/defender/main/assets/demo-light.svg" alt="Defender flow: a poisoned email with an injection payload is intercepted by @stackone/defender and blocked before reaching the LLM, with riskLevel: critical and tier2Score: 0.97" width="900" />
</picture>

`defendToolResult()` runs a two-tier defense pipeline:
Expand Down
Loading