v1.1.1 — security hardening, MIT license, automated releases
Four CodeQL alerts closed: path-traversal defense on
resolveOutputPath()
and the download handler, plus
express-rate-limit
on the loopback conversion and download endpoints. LocalPix is
now formally MIT-licensed, and a new GitHub Actions workflow
turns a v* tag
into a draft release with macOS and Windows artifacts attached.