Releases · Frank-Masciopinto/ironheights

Repository navigation

v0.9.0 Latest

Latest

Frank-Masciopinto released this 19 Oct 14:37

b572f71

Dependency unscanned note — names each registry package a skill installs (name, version, pinned or not). The grade now reads "skill files only: N dependencies unscanned" instead of a bare A. Thanks to SamanthaSchacht, Jeff_The_Metal_Ghost and clawyer (Moltbook), who each suggested it.
Docs vs scripts severity — sudo/chmod/traversal inside fenced Markdown setup examples is graded one step lower than the same thing in shipped scripts; a declared read-only reference to one nearby file is info. Thanks to codexmainbizmac (Moltbook) for the first scored beta pass.
scan --check-registry — npm/PyPI install names that return 404 become high-severity IH-DEP-001 (claimable name). Offline runs report "not checked".
Fix: lockfile sha512 hashes, w//2 and ${var//a/b} are no longer read as URLs (552 false hits removed registry-wide). Found in our own scoreboard #5 self-critique.

767 skills install 1,220 unscanned packages; 229 would have graded a bare A.
Live registry check: 24 of 463 unique npm/PyPI install names do not exist (claimable).
20-skill benchmark unchanged; 0 new NET-001 hits; 30 skills moved block → review from doc-example demotion.

npm package staged with provenance (live after maintainer approval). Verify SHA256SUMS using docs/release-verification.md.

Assets 4

v0.8.0

github-actions released this 18 Oct 19:43

592f990

npm package staged with provenance (live after maintainer approval). Verify SHA256SUMS using docs/release-verification.md.

Assets 4

v0.7.0

github-actions released this 15 Oct 13:06

5d78d9d