- Normalize Git snapshots and Python sdist/wheel layouts before diffing.
- Extract changed source from archives and show its line-level delta.
- Preserve composite findings and rank evidence across the complete change.
- Recognize prerelease transitions and apply a tight behavioral budget.
- Detect public APIs backed by floating young dependencies.
- Detect auto-loaded source or scripts that download, write, and execute payloads.
- Improve npm entrypoint discovery and local LLM guidance.
- Detect 132/132 corpus attacks with no false positives across 98 clean transitions.
Full Changelog: v0.4.1...v0.5.0