Release react-pull-to-refresh 1.0.0

[Cylop]

Summary

• promote @nipe-solutions/react-pull-to-refresh to the stable 1.0.0 contract without changing the established public API or gesture mechanics
• verify the exact 12-file tarball in isolated React 18 and React 19 ESM, CommonJS, TypeScript, CSS, and SSR consumers
• publish only a checksummed, preverified artifact through the protected npm environment with OIDC provenance
• update the documentation site, security policy, browser guidance, and QA records for the stable release

Validation

• npm ci
• npm run check — 71 unit tests plus formatting, lint, types, API, bundle size, package, workflow-policy, and website checks
• npm run test:e2e — 103 passed across Chromium, Firefox, and WebKit; 8 trusted-touch cases intentionally skipped outside Chromium
• npm audit --audit-level=moderate — 0 vulnerabilities
• npm run release:check -- --dry-run — exact package inventory, latest channel, public access, provenance flags, checksum, and unpublished registry version verified

Compatibility and limitations

• React 18.3 and React 19 remain peer-supported; Node 24 remains the development and release runtime
• runtime dependencies remain limited to React peers
• no physical iOS/Android device run or human screen-reader session was performed; automated engine, keyboard, and axe results are documented without presenting them as manual evidence

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
react-pull-to-refresh	Ready	Preview	Sep 29, 2026 8:19pm UTC