Security Watch 0.1.0-alpha.0

Security Watch's first alpha monitors security advisories and news for a configured inventory, with optional model analysis and Slack or SMTP alerts.

Install with Node.js 24 or newer:

npm install --global @shieldaai/security-watch@0.1.0-alpha.0

• Import libraries by name or exact version across 12 ecosystems, including PHP, Python, npm, Go, Java and Rust. Missing versions remain uncertain.
• Configure the scan interval separately from the news window; setup defaults to a scan every 30 minutes covering the last 40 minutes.
• Use 22 provider profiles across six API protocols, with bounded requests, evidence checks and persistent budgets.
• Keep processing valid source records, findings and queued alerts after isolated failures. Delivery retries distinguish explicit rejection from uncertain receipt.
• Check worker health, configure an external heartbeat, preview retention and verify database backups before rotation.

The release commit is abde870beb5058d8e82a071df11afb0ba29aecda. CI and CodeQL passed, as did all 639 tests, formatting, strict compilation and clean package consumer checks. The public npm tarball matches the inspected release artifact byte for byte; its installed CLI, setup, library normalization, offline matching, types and runtime exports were checked separately.

This is an alpha. Provider protocol tests use simulated responses; they do not establish live compatibility for every hosted model. Prior live OpenAI checks passed schema and evidence validation; the latest Anthropic evaluation was blocked by invalid credentials. Slack and SMTP were checked with simulated transports; no real notification was sent. See the release review for source checks, evaluation results and operational limits.