Accepting contributions?

[nLight]

Hey folks, do you accept contributions? I don't feel like opening a PR for ai-generated contributions, but just to get on your radar, I forked your awesome project and hardened it a bit for production. Feel free reintegrating https://github.com/nLight/keygate

• feat: Return price and currency on the public plans endpoint
• feat: Add public endpoint to list a product's active plans
• feat: reveal license keys on demand instead of in every payload
• fix: keep the Stripe webhook secret out of the admin settings response
• fix: keep server-owned settings out of the admin settings form
• security: Harden Keygate for production deployment

Thank you!

[5canx]

I would like to add a feature to the license: that the timer only starts calculating after activation (countdown).

[alanisme]

Yes, PRs welcome.

Four of them are in v0.1.3 — public plans endpoint, on-demand key reveal, and keeping the webhook secret and server-owned settings out of the settings response. Rewrote them rather than cherry-picking so each got tests. Thanks for the fork.

The hardening commit I'd rather take in pieces. The SSRF check, CSV injection and usage validation are the parts I want — separate PRs welcome, otherwise I'll get to them.