v0.1.5

0.1.5

• Add a conservative App Bridge review finding when an embedded app has no statically visible official app-bridge.js integration evidence.

What's Changed

• feat: add conservative App Bridge evidence check by @efegokdemir in #12

Full Changelog: v0.1.4...v0.1.5

v0.1.4

0.1.4

• Refine npm search metadata and the Action description for Shopify App Store review-readiness checks.
• Refresh the pinned Action release and remove the duplicate self-reference from related tools.

What's Changed

• docs: clarify MIT contribution terms by @efegokdemir in #7
• ci: migrate all CodeQL actions together to v4.38.2 by @efegokdemir in #8
• docs: improve issue routing and privacy by @efegokdemir in #9
• docs: include bundled third-party notices by @efegokdemir in #10
• chore: improve discovery metadata and release by @efegokdemir in #11

Full Changelog: v0.1.3...v0.1.4

v0.1.3

0.1.3

• Refresh published npm metadata to the canonical RexCode-Digital repository and issue tracker.
• Preserve the existing package name, license, author attribution, and runtime behavior.

What's Changed

• chore: align project metadata with RexCode by @efegokdemir in #5
• chore: prepare 0.1.3 RexCode metadata release by @efegokdemir in #6

Full Changelog: v0.1.2...v0.1.3

v0.1.2

0.1.2

• Declare Node 24 for the GitHub Action, matching current runner support; CLI engines remain Node >=20.

• Parse actual TOML and validate config types, URLs, and compliance subscriptions.

• Do not allow documentation or incomplete listing manifests to satisfy implementation checks.

• Include environment-file variants, reject file/config/manifest symlinks, and bound file analysis.

• Validate CLI/Action policies and write multiline JSON outputs safely.

• Ship and independently test a self-contained Action bundle; preserve historical v0.1.0 and corrected v0.1.1 releases.

• Validate clean installs and source-only coverage on supported Node versions.

What's Changed

• build(deps): bump actions/checkout from 4.2.2 to 7.0.1 by @dependabot[bot] in #1
• build(deps): bump actions/setup-node from 4.4.0 to 7.0.0 by @dependabot[bot] in #2
• Harden readiness checks and ship a verified Action bundle by @efegokdemir in #3
• Declare the supported GitHub Action runtime by @efegokdemir in #4

New Contributors

• @dependabot[bot] made their first contribution in #1
• @efegokdemir made their first contribution in #3

Full Changelog: v0.1.1...v0.1.2

Shopify App Review Guard v0.1.1

Recommended patch release

v0.1.1 fixes the GitHub Action distribution entrypoint and release packaging issue found in v0.1.0. The historical v0.1.0 release remains unchanged and is not recommended.

This release includes the corrected dist/index.js, expanded regression coverage, safer repository traversal, explicit configuration selection, and severity-aware policy thresholds.

Shopify App Review Guard v0.1.0

Deterministic offline preflight checks for Shopify App Store and production readiness. Includes CLI, GitHub Action, JSON/SARIF output, compliance/webhook/authentication/security signals, and documented manual-review limitations.