v0.14.0

v0.14.0

Security & Safety

• Block reparse-point (junction/symlink) traversal in scans and mutations
• Full shortcut metadata extraction with risk classification (ScriptHost, NetworkTarget, HiddenExecution, LongArguments, WebTarget, ScriptTarget)
• Atomic file writes with .bak fallback for config and undo journal

New Features

• Package-manager provenance detection (winget, Chocolatey, Scoop, MSIX, Installer)
• Scan report export (CSV/JSON)
• Enterprise handoff export with deployment guidance
• Virtual grouping preview (non-mutating category organization preview)
• Rule evaluation engine with preset import/export
• Localization template export and completeness validation
• Elevated relaunch button with capability status display
• Known Folder API resolution for Start Menu roots

Build & Release

• SHA256 manifest and optional Authenticode signing in release builds
• Pester code coverage reporting
• winget, Chocolatey, and Scoop package metadata generation