Releases: BlackUnicornSecurity/bonklm
Releases · BlackUnicornSecurity/bonklm
v0.2.0 - BonkLM: LLM Security Guardrails
BonkLM v0.2.0 Release Notes
Release Date: February 23, 2026
Overview
BonkLM v0.2.0 is a significant update that includes a complete project rebranding, enhanced security features, and improved connector ecosystem. This release focuses on security hardening, better developer experience, and expanded platform support.
What's New
Project Rebranding
- New Name: The project has been renamed from LLM Guardrails to BonkLM
- New Package Scope: All packages now use the
@blackunicorn/bonklmnamespace - CLI Commands Updated: All CLI commands now use
bonklminstead ofllm-guardrails
Security Enhancements
Attack Logger (New Feature)
- Comprehensive attack logging system for security monitoring
- Configurable logging levels and output formats
- Structured attack data capture for analysis and forensics
- Located in
packages/logger
Core Validation Hardening
- Enhanced prompt injection detection with improved pattern matching
- Strengthened jailbreak detection algorithms
- Better boundary detection for adversarial inputs
- Improved PII (Personally Identifiable Information) validation
Connector Updates
All connector packages bumped to v1.1.0 with:
- Improved error handling and resilience
- Better timeout management
- Enhanced credential validation
- Updated dependencies for security
Updated connectors:
@blackunicorn/bonklm-anthropicv1.1.0@blackunicorn/bonklm-chromav1.1.0@blackunicorn/bonklm-copilotkitv1.1.0@blackunicorn/bonklm-expressv1.1.0@blackunicorn/bonklm-fastifyv1.1.0@blackunicorn/bonklm-genkitv1.1.0@blackunicorn/bonklm-huggingfacev1.1.0@blackunicorn/bonklm-langchainv1.1.0@blackunicorn/bonklm-llamaindexv1.1.0@blackunicorn/bonklm-mastrav1.1.0@blackunicorn/bonklm-mcpv1.1.0@blackunicorn/bonklm-nestjsv1.1.0@blackunicorn/bonklm-ollamav1.1.0@blackunicorn/bonklm-openaiv1.1.0@blackunicorn/bonklm-pineconev1.1.0@blackunicorn/bonklm-qdrantv1.1.0@blackunicorn/bonklm-vercelv1.1.0@blackunicorn/bonklm-weaviatev1.1.0
Middleware Framework Improvements
- Express Middleware: Enhanced request/response handling
- Fastify Plugin: Improved integration patterns
- NestJS Module: Better decorator support and dependency injection
Quality & Testing
- 100% test pass rate across all packages
- 2003 passing tests
- Enhanced security test coverage
- Improved type safety across all packages
Package Versions
| Package | Old Version | New Version |
|---|---|---|
@blackunicorn/bonklm (core) |
0.1.0 | 0.2.0 |
@blackunicorn/bonklm-logger |
0.1.0 | 0.2.0 |
@blackunicorn/bonklm-wizard |
0.1.0-deprecated | 0.2.0-deprecated |
| All connectors | 1.0.0 | 1.1.0 |
Security Fixes
This release includes security improvements to:
- Command Injection Prevention: Enhanced validation in the wizard package to prevent command injection through PATH manipulation
- DoS Protection: Added resource limits to prevent denial-of-service through resource exhaustion
- Credential Handling: Improved secure credential handling in audit logs
- Input Validation: Strengthened input validation across all validators
Breaking Changes
CLI Commands
If you were using the old llm-guardrails CLI commands, you'll need to update to bonklm:
# Old (v0.1.0)
llm-guardrails wizard
llm-guardrails status
# New (v0.2.0)
bonklm wizard
bonklm statusPackage Imports
Update your imports to use the new package names:
// Old (v0.1.0)
import { GuardrailEngine } from '@llm-guardrails/core';
// New (v0.2.0)
import { GuardrailEngine } from '@blackunicorn/bonklm';Migration Guide
Updating from v0.1.0
-
Update package names in your
package.json:npm uninstall @llm-guardrails/core npm install @blackunicorn/bonklm
-
Update imports in your code:
// Find and replace - from '@llm-guardrails/core' + from '@blackunicorn/bonklm' - from '@llm-guardrails/openai' + from '@blackunicorn/bonklm-openai'
-
Update CLI scripts in your
package.json:{ "scripts": { - "setup": "llm-guardrails wizard" + "setup": "bonklm wizard" } }
Installation
# Core package
npm install @blackunicorn/bonklm
# Connectors
npm install @blackunicorn/bonklm-openai
npm install @blackunicorn/bonklm-anthropic
npm install @blackunicorn/bonklm-express
# Logger
npm install @blackunicorn/bonklm-loggerDocumentation
Contributors
- Black Unicorn Security Team
Support
- GitHub Issues: https://github.com/blackunicorn/bonklm/issues
- Documentation: https://github.com/blackunicorn/bonklm#readme
- Security: security@blackunicorn.tech
License
MIT License - See LICENSE file for details