Blog

A month after the last update, I’m releasing version 0.2.0 of the homebridge-airly2 plugin. This is the biggest update in years, focused on security, code quality, and stability. What’s New in v0.2.0? Security and Validation The previous version trusted configuration data without verification. Now all parameters are thoroughly validated: Geographic coordinate validation: // Latitude: -90 to 90 // Longitude: -180 to 180 if (latitude < -90 || latitude > 90) { throw new Error('Invalid latitude'); } MaxDistance validation: ...

After a couple of years I finally shipped an update to Homebridge Airly 2. The plugin once again works smoothly with the Airly API and the latest Homebridge and Node.js releases. The rewrite also removed third-party libraries that were frequently reported as vulnerable, so the dependency tree is now much cleaner. If you rely on HomeKit automations, you can keep tracking air quality without installing extra sensors. A Deeper Look: Zero Dependencies and Enhanced Security Let’s dive into what “removed third-party libraries” means for you. The previous version of the plugin relied on request, a popular but now-deprecated library. It’s no longer actively maintained, which in the software world can lead to unpatched security vulnerabilities and stability issues down the road. ...