update package info

Author: amitguptagwl

.github/SECURITY.md

@@ -1,3 +1,12 @@
+v6 is an experimental release and has no impact on main app. This might be separated soon. Vulenrability on this might not be accepted.
+
+---
+
+Please also carefully check if prototype pollution is causing any damage or is it just a false alarm.
+
+---
+
+
 If you believe you have found a security vulnerability in this repository which can be potentially harful for the users in anyway, please do not report security vulnerabilities through public GitHub issues. Instead, please report it to us as described below.
 
 To report a security vulnerability, please use the

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion
 
+**5.5.5 / 2026-03-13**
+- sanitize dangerous tag or attribute name
+- error on critical property name
+- support onDangerousProperty option
+
 **5.5.4 / 2026-03-13**
 - declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher
 

docs/CHECK_LIST.md

@@ -7,6 +7,10 @@ Pre release
 * [ ] TS and CJS typings are updated
   - fxp.d.cts
   - fxp.d.ts
+
+  check here
+  - https://www.typescriptlang.org/play/
+  - https://github.com/NaturalIntelligence/fxp-type-testing
 * [ ] ReadMe file or docs are updated for any change, user list, performance report, links etc.
 * [ ] Single test is not running `fit`
 * [ ] `npm run checkReadiness` is used to check the files being published