Skip to content

v0.1.2: Socket Security Remediation & CLI Provenance

Choose a tag to compare

View all tags
@devravik devravik released this 28 Sep 08:36
· 4 commits to main since this release
v0.1.2
3c0ff56

What's Changed

Security & Hardening

  • Socket Audit Remediation: Resolved all Socket audit findings across the codebase.
  • Shell Interpolation Safety: Replaced execSync with argument-array spawnSync calls in git baseline merge-base resolution to eliminate shell injection attack surfaces.
  • CLI Provenance Verification: Added --version / -v flags to the ei CLI to establish authentic @devravik/engineering-intelligence package provenance.
  • Self-Verifying Protocol: Added Installation, Trust, and Self-Verifying CLI Protocol to SKILL.md across canonical, root, and provider definitions.
  • Fixture Isolation: Reorganized detector test fixtures into fixtures/detectors/ with explicit documentation and added socket.yml for scanning exclusion.

Ecosystem & Distribution

  • Refined README hero banner, badge matrix, and skills.sh distribution model.
  • Updated skill packages across all supported harnesses (AGY, Claude Code, Cursor, Copilot, Cline, Zed, OpenHands, Kilo).
  • Attached engineering-intelligence-skill.zip for 1-click import into Claude.ai Skills.
Assets 3
Loading