pkgwhy 1.0.0rc1
Release candidate for pkgwhy 1.0.0. Includes package intelligence, vulnerability/provenance foundations, static rule evidence, local registry/runner MVP, dynamic analysis skeleton, and agent policy hardening. Dynamic analysis remains experimental/out-of-scope for 1.0 production guarantees.