JonKazama-Hellion/HellionChat
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Releases 42 Activity

chore(linting): refresh configs and sweep auto-fix

Browse Source 
Pull in the refreshed linter and tooling configs (editorconfig,
gitignore, gitattributes, prettierignore, prettierrc, markdownlint,
yamllint, env.example, dotnet-tools) and run prettier and markdownlint
in --fix / --write mode across the repo so the existing tree matches
the new rules.

- prettier 2-space indent on yaml/yml and json overrides, asterisk
  strong, underscore emphasis, proseWrap always
- markdownlint MD007 indent aligned to 2 and MD049 to underscore so
  prettier output stays passing
- preflight Block F also ignores CLAUDE.md (gitignored personal file)
- prettierignore extended to keep HellionChat.yaml manifest and the
  NuGet packages.lock.json out of the formatter

No semantic content changed; csharpier, build, full build-suite
(729/729) and the new prettier/markdownlint/yamllint checks all green.
This commit is contained in:
Jon Kazama
2026-05-17 17:20:55 +02:00
parent 2315f10d91
commit 0220e5d756
53 changed files with 3501 additions and 2630 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/THIRD_PARTY_NOTICES.md
+22 -20
View File
@@ -1,7 +1,7 @@
# Third-party notices
HellionChat ships and depends on a number of third-party components. This document lists them, their licences and which
of them touch the network. It is the inventory referenced by `PRIVACY.md`.
HellionChat ships and depends on a number of third-party components. This document lists them, their
licences and which of them touch the network. It is the inventory referenced by `PRIVACY.md`.
Last reviewed: 2026-05-05 (HellionChat v1.1.0).
@@ -20,11 +20,11 @@ Pinned in `HellionChat/HellionChat.csproj`. Versions reflect the v1.1.0 build.
| [SixLabors.ImageSharp](https://github.com/SixLabors/ImageSharp) | 3.1.12 | [Six Labors Split License 1.0](https://github.com/SixLabors/ImageSharp/blob/main/LICENSE) (OSI-approved; free for open-source / non-commercial use, commercial licence required for closed-source commercial use) | no | Image decoding for cached emotes. |
| [SQLitePCLRaw.lib.e_sqlite3](https://github.com/ericsink/SQLitePCL.raw) | 3.50.3 | MIT | no | Native SQLite binary, explicitly pinned to override the transitive default for CVE-2025-6965 (memory corruption from aggregate-term overflow) and CVE-2025-7709. |
Six Labors note: HellionChat is an EUPL-1.2-licensed open-source project distributed at no cost. Use of ImageSharp 3.x
under the Six Labors Split License 1.0 is permitted on that basis. Anyone forking HellionChat for closed-source or
commercial redistribution should review the
[Six Labors licence terms](https://github.com/SixLabors/ImageSharp/blob/main/LICENSE) and obtain a commercial licence if
required.
Six Labors note: HellionChat is an EUPL-1.2-licensed open-source project distributed at no cost. Use
of ImageSharp 3.x under the Six Labors Split License 1.0 is permitted on that basis. Anyone forking
HellionChat for closed-source or commercial redistribution should review the
[Six Labors licence terms](https://github.com/SixLabors/ImageSharp/blob/main/LICENSE) and obtain a
commercial licence if required.
## SDK and tooling
@@ -44,23 +44,24 @@ required.
## Upstream code
HellionChat is a fork of [Chat 2](https://github.com/Infiziert90/ChatTwo) by Infiziert90 (Infi) and Anna Clemens, also
licensed under EUPL-1.2. The bulk of the code, including the message store architecture, the channel logic, the hook
system and the ImGui chat window, originates from upstream. See `../NOTICE.md` for the attribution; `UPSTREAM_SYNC.md`
documents the upstream-sync history, including the close of active cherry-picking in the v1.4.x cycle.
HellionChat is a fork of [Chat 2](https://github.com/Infiziert90/ChatTwo) by Infiziert90 (Infi) and
Anna Clemens, also licensed under EUPL-1.2. The bulk of the code, including the message store
architecture, the channel logic, the hook system and the ImGui chat window, originates from
upstream. See `../NOTICE.md` for the attribution; `UPSTREAM_SYNC.md` documents the upstream-sync
history, including the close of active cherry-picking in the v1.4.x cycle.
---
## Components that touch the network
Of everything listed above, **none** of the bundled or NuGet components opens network connections on their own. All
outbound traffic is initiated explicitly by HellionChat's own source files and is documented in `PRIVACY.md` under
"Outbound network calls":
Of everything listed above, **none** of the bundled or NuGet components opens network connections on
their own. All outbound traffic is initiated explicitly by HellionChat's own source files and is
documented in `PRIVACY.md` under "Outbound network calls":
- `HellionChat/EmoteCache.cs` → BetterTTV API + CDN (opt-out via setting)
The earlier Square Enix Lodestone font download (`FontManager.cs`) was removed in v1.0.4 — it was a leftover from
upstream's removed webinterface feature and was no longer consumed.
The earlier Square Enix Lodestone font download (`FontManager.cs`) was removed in v1.0.4 — it was a
leftover from upstream's removed webinterface feature and was no longer consumed.
---
@@ -72,8 +73,9 @@ To regenerate the dependency inventory after a version bump:
dotnet list HellionChat.sln package --include-transitive
```
The "direct NuGet dependencies" table above only lists direct references. Transitive dependencies pulled in by Dalamud
SDK or by the listed packages are covered by the SDK / package licences and documented by their respective maintainers.
The "direct NuGet dependencies" table above only lists direct references. Transitive dependencies
pulled in by Dalamud SDK or by the listed packages are covered by the SDK / package licences and
documented by their respective maintainers.
To re-audit the network-call inventory:
@@ -82,5 +84,5 @@ grep -rn -E "HttpClient|HttpRequest|new Uri\(|https?://" \
--include="*.cs" HellionChat/
```
Any new hit that is not a click-through (`Util.OpenLink`) or a payload-parsing call must be added to `PRIVACY.md` before
release.
Any new hit that is not a click-through (`Util.OpenLink`) or a payload-parsing call must be added to
`PRIVACY.md` before release.