v0.2.0

What's Changed

• feat: adopt bomly-sdk v0.7.0 and emit per-project-root evidence by @bomly-guy in #1

New Contributors

• @bomly-guy made their first contribution in #1

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Initial release of the jvmreach reachability analyzer as a standalone Bomly plugin. It discovers Maven, Gradle, and sbt modules, scans Java, Kotlin, and Scala sources for imports, and annotates Bomly's vulnerability findings with package-tier reachability, with on-disk result caching. The same analyzer ships embedded in the full Bomly CLI build; no JVM is required.