v0.5.10

What's Changed

• Release 0.5.10: schema check workflow by @CorwinFoundation in #10

Full Changelog: v0.5.9...v0.5.10

v0.5.9

What's Changed

• fix: make release deprecation retry idempotent by @CorwinFoundation in #7
• fix: verify npm deprecation from public registry by @CorwinFoundation in #8
• Release 0.5.9: public-copy cleanup by @CorwinFoundation in #9

Full Changelog: v0.5.8...v0.5.9

v0.5.8

What's Changed

• v0.5.8: offline delivery and pre-attachment hardening by @CorwinFoundation in #6

Full Changelog: v0.5.7...v0.5.8

v0.5.7

What's Changed

• Release 0.5.7 with case-correct MCP Registry identity by @CorwinFoundation in #5

Full Changelog: v0.5.6...v0.5.7

v0.5.6

What's Changed

• Add privacy-safe scan feedback form by @CorwinFoundation in #3
• v0.5.6: publish official MCP Registry metadata by @CorwinFoundation in #4

Full Changelog: v0.5.5...v0.5.6

v0.5.5

What's Changed

• v0.5.5 feat: add pre-attachment tool vetting by @CorwinFoundation in #2

Full Changelog: v0.5.4...v0.5.5

v0.5.4

Full Changelog: v0.5.3...v0.5.4

v0.5.3

What's Changed

• feat: release agent-scan 0.5.3 by @CorwinFoundation in #1

New Contributors

• @CorwinFoundation made their first contribution in #1

Full Changelog: v0.5.2...v0.5.3

v0.5.2

Full Changelog: v0.5.1...v0.5.2

v0.5.1 — zero-config agent scanner

What changed

• Zero-argument discovery for Claude, Cursor, VS Code, Windsurf, and Gemini agent/MCP configs
• Live runtime intake through --stdin and MCP scan_my_runtime
• Compact finding output with immediate Stop instructions and explicit [derived] evidence
• OpenAPI and OpenTelemetry OTLP JSON adapters
• Semantic schema checks BB007 (unconstrained command/expression/SQL) and BB008 (unvalidated destinations)
• Non-enforcing --suggest-policy actions and review-required patch templates
• SARIF 2.1.0 output, stronger multi-input receipts, and three non-BackBond wild fixtures

Static only: no hosted upload, second analyzer, automatic mutation, or active probe.

Pin it: npx @backbond/agent-scan@0.5.1 scan