After a couple of years I finally shipped an update to Homebridge Airly 2. The plugin once again works smoothly with the Airly API and the latest Homebridge and Node.js releases. The rewrite also removed third-party libraries that were frequently reported as vulnerable, so the dependency tree is now much cleaner. If you rely on HomeKit automations, you can keep tracking air quality without installing extra sensors.
A Deeper Look: Zero Dependencies and Enhanced Security
Let’s dive into what “removed third-party libraries” means for you. The previous version of the plugin relied on request, a popular but now-deprecated library. It’s no longer actively maintained, which in the software world can lead to unpatched security vulnerabilities and stability issues down the road.
The new homebridge-airly2 takes a modern approach, boasting zero external production dependencies. It now uses the native https module built into Node.js to communicate with the Airly API. This shift has several key advantages:
- Enhanced Security: With no third-party code, the plugin isn’t exposed to external vulnerabilities beyond the control of the author.
- Better Performance: Less code to parse and execute makes the plugin lighter and faster.
- Improved Stability: A simpler, self-contained codebase is easier to maintain and less prone to bugs.
This was a deliberate move to create more robust and trustworthy software for the smart home ecosystem, where reliability is paramount.
You can find full details on the dedicated project page.
Have an idea or spotted a bug? Visit the repo at github.com/ximot/homebridge-airly2. Every issue or PR helps keep the momentum. Thanks!