Repository navigation
Add NewPolicy for package-pattern cooldown overrides. Exact package overrides take precedence over patterns, followed by ecosystem overrides and the global default. Patterns support * and ?, normalize npm scope aliases, and reject unsupported glob syntax, invalid durations, and conflicting normalized patterns.
Policy exposes For, Evaluate, IsAllowed, and Enabled; the existing Config API is unchanged. The module now requires Go 1.26 and specifies the Go 1.26.7 toolchain.
This release also adds dependency update cooldowns and workflow security checks, and fills in the MIT copyright notice.