v0.3.6

@isoso.dev/isoso 0.3.6

Small CLI release focused on helping developers stay on the latest npm package.

What's new

• Outdated-version nudge for everyone — When you run the CLI, Isoso checks the npm latest version for @isoso.dev/isoso (3s timeout). If you're behind, a red banner on stderr shows your version, the latest version, and update commands (npm install -D @isoso.dev/isoso@latest or npx @isoso.dev/isoso@latest scan). This used to run only in CI; 0.3.6 runs it locally too (still non-blocking).
• Broader command coverage — The check also runs on isoso explain and isoso rules, in addition to existing behavior on scan and fix.

Opt out

Set ISOSO_SKIP_VERSION_CHECK=1 to disable the check (e.g. air-gapped CI or pinned versions).

Install / upgrade

npm install -D @isoso.dev/isoso@0.3.6
# or
npx @isoso.dev/isoso@0.3.6 scan

v0.3.5

@isoso.dev/isoso 0.3.5

Documentation and npm packaging release. CLI behavior matches 0.3.3; this version makes the published package easier to discover, install, and configure—especially for optional AI.

npm package documentation

• README and LICENSE ship in the tarball — npm install @isoso.dev/isoso and the npm package page now show the full guide, not a stub.
• prepublishOnly copies metadata — Before publish, scripts/copy-package-metadata.mjs syncs the repo README.md and LICENSE into packages/isoso-cli/ so npm always matches the repo docs.
• Clearer package metadata — Updated description, keywords, and files list so install surfaces install commands, commands overview, and licensing.

What the README covers

• isoso fix — How codemods work, --dry-run, which rules are [fixable], and reviewing diffs before merge.
• Optional AI (bring your own key) — No shared API key in npm. Set ISOSO_AI_KEY in .env (CLI walks up from your cwd). Default scan uses AI when a key is present; use --static for local-only rules or --ai to require AI. isoso explain supports AI or --builtin (no network).
• Provider options — Documented ISOSO_AI_MODEL, ISOSO_AI_BASE_URL, and ISOSO_AI_CHAT_URL for OpenAI-compatible endpoints.
• Static vs AI — Speed, cost, determinism, and the same finding schema for both modes.
• CI — Examples with --static, --format json, and --fail-on; guidance to keep AI keys in secrets only when you intend to run AI in CI.
• Security & compliance — Source-level analysis limits, no WCAG/legal guarantee, AI data sent to your provider, and secrets hygiene (.env / .gitignore).

Install / upgrade

npm install -D @isoso.dev/isoso@0.3.5
# or
npx @isoso.dev/isoso@0.3.5 scan

v0.3.3

• 57 static WCAG-oriented rules: broader JSX/TSX checks (forms, keyboard, landmarks, media, document structure, and more).
• Expanded isoso fix: more fixable rule ids; codemods updated for common patterns. Use --dry-run before applying.
• Shared line-scan engine: new @isoso/core line-scan path plus scripts/sync-cloud-scan.mjs so Isoso Cloud repo scans stay aligned with CLI static heuristics where applicable.
• Clearer help & CLI polish: richer isoso help, streamlined command flow, and npm update nudge in CI when a newer @isoso.dev/isoso is published (skip with ISOSO_SKIP_VERSION_CHECK=1).