Skip to content

v0.4.0

Choose a tag to compare

View all tags
@arankair arankair released this 07 Aug 19:00
· 11 commits to main since this release
v0.4.0
6cf6f92
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ADDED

  • Explicit incomplete-scan diagnostics and failOnIncomplete policy support.
  • Registry request timeouts, bounded retries, and concurrent package lookups.
  • Automated npm publishing with provenance from GitHub Releases.
  • Packed-package smoke tests across supported Node.js versions and platforms.

CHANGED

  • The default Trust Score threshold is now 85.
  • The GitHub Action runs the exact published npm package for release builds.
  • GitHub Actions dependencies are pinned to immutable commits.

FIXED

  • Git-tracked .env detection on Windows.
  • GitHub Code Scanning uploads for informational signals without file locations.
Assets 2
Loading