Skip to content

v0.1.79

Choose a tag to compare

@gauravbsinghal gauravbsinghal released this 18 Aug 06:11
· 2 commits to main since this release

Niro v0.1.79

Summary

Third-party component coverage now includes offline dependency advisory scanning.

Changes

  • Pentests inventory runtime dependencies and use a bundled vulnerability database to identify advisory candidates for live validation.

Security

  • Dependency advisory matching runs offline inside the attack-tool sandbox.

Compatibility and upgrade

No action required.

Known issues

  • checksums.txt does not cover niro.mcpb.
  • Release artifacts have no detached signatures, provenance attestation, or SBOM.