Skip to content

Releases: Morphilab/nebulaforge

v1.0.0 — Initial Release: Secure Conda Environment Manager

12 Jun 06:44

Choose a tag to compare

NebulaForge v1.0.0 — Forge secure, auditable Conda environments with enterprise-grade security.

This is the initial stable release of NebulaForge, a comprehensive Conda environment manager built with security and reproducibility as first-class concerns.

Key highlights

  • Three interfaces: Rich-based TUI, interactive CLI, and traditional argparse CLI
  • Four security profiles: Low, Medium, High, Paranoid — progressively stricter controls
  • Cryptographic audit trail: SHA-256 hash chain on every audit entry, tamper-evident
  • Secure backups: Automatic pre-operation backups with SHA-256 checksum verification
  • Vulnerability scanner: Built-in detection of 20+ known vulnerable packages (CVE-aware)
  • Encrypted storage: Fernet (AES-128-CBC + HMAC-SHA256) with PBKDF2 (600k iterations)
  • Plugin system: Extensible architecture with SecurityScanner and HealthCheck built-ins
  • Session management: Cryptographically secure tokens with TTL and max-sessions enforcement
  • Strict validation: Malware keyword blocking, dangerous pattern detection, profile-aware strictness
  • Python 3.8 through 3.12 — tested across all versions
  • 239 tests passing across all supported Python versions
  • Security-hardened: Command runner hardening, path-traversal protection, secure file permissions