v0.1.0
Initial release of the jsreach reachability analyzer as a standalone Bomly plugin. It discovers package entry points across npm, pnpm, and Yarn workspaces, builds a static import graph with embedded esbuild, and annotates Bomly's vulnerability findings with package-tier reachability, with on-disk result caching. The same analyzer ships embedded in the full Bomly CLI build; this plugin packages it for lite builds and external-plugin hosts.