v0.16.3

This patch release fixes IndexError on unbalanced ')' in license expressions and will auto-sync ID registry after SBOM generation, so that in the next generation the IDs will be stable.

Note

Limitation notes: While Pitloom can work with any Python project, it currently gathers more information from Hatchling project. More complete support for setuptools is planned for version 0.17.0. uv_build, Poetry Core, PDM-Backend, and Flit-Core are also in the plan. See full limitation notes.

Install for CLI/Python API:

pip install -U pitloom

Install for AI coding assistant:

See the website on how to install Pitloom AI skills and the Claude Code plugin.
Try asking the AI agent to "enrich this SBOM".

Report issues: https://github.com/bact/pitloom/issues

What's changed

• Add fuzz harnesses and strict pytest warnings by @bact in #179
• Add sigstore and provenance attestation by @bact in #180
• Auto-sync Loom ID registry after SBOM generation by @bact in #178

Full Changelog: v0.16.2...v0.16.3