CodebaseScan v0.5.0

Full Changelog: v0.4.0...v0.5.0

CodebaseScan v0.4.0

Full Changelog: v0.3.0...v0.4.0

CodebaseScan v0.3.0

CodebaseScan 0.3.0 strengthens the deterministic, local-first audit workflow for real React, Next.js, JavaScript, and TypeScript projects.

Highlights

• Reusable GitHub Action with full-repository context, optional baseline comparison, deterministic policy gates, portable HTML artifacts, and SARIF upload.
• One current coverage-style static report that updates safely in place instead of accumulating report history by default.
• Reviewed calibration across four authorized project snapshots: 54 candidates, 95.1% precision in the labeled applicable sample, and an explicit incomplete false-negative scope instead of an unsupported recall claim.
• Improved React, Next.js, SaaS, authorization, webhook, accessibility, environment-contract, and dependency analysis.
• Versioned machine contracts, review rules, and a bundled Codex skill for optional downstream investigation without adding a model dependency to the CLI.
• Package installation verified with npm, pnpm, and Yarn on supported Node.js versions.

Install or upgrade:

npm install --save-dev codebasescan@0.3.0
npx codebasescan audit .

See the changelog for the complete release details.

CodebaseScan 0.2.1

Patch release adding CLI version output and hardening release verification across npm, pnpm, and Yarn. Published through npm Trusted Publishing with provenance.

CodebaseScan 0.2.0

First public release of CodebaseScan. Includes the installable CLI, script-free static HTML reports, React and Next.js source auditing, accessibility and web-posture checks, offline dependency and supply-chain analysis, CI baselines, SARIF/SBOM exports, and optional bounded AI investigation. See CHANGELOG.md for the full list.