This is first "release" within the ASI version.
It modifies the upstream by introducing a --passive-only
flag to not run checks that send "attack" payloads.
Additionally it now supports a WAFW00F_PLUGIN_DIR
environment variable pointing to an additional directory of plugins.