v0.3.5

@isoso.dev/isoso 0.3.5

Documentation and npm packaging release. CLI behavior matches 0.3.3; this version makes the published package easier to discover, install, and configure—especially for optional AI.

npm package documentation

• README and LICENSE ship in the tarball — npm install @isoso.dev/isoso and the npm package page now show the full guide, not a stub.
• prepublishOnly copies metadata — Before publish, scripts/copy-package-metadata.mjs syncs the repo README.md and LICENSE into packages/isoso-cli/ so npm always matches the repo docs.
• Clearer package metadata — Updated description, keywords, and files list so install surfaces install commands, commands overview, and licensing.

What the README covers

• isoso fix — How codemods work, --dry-run, which rules are [fixable], and reviewing diffs before merge.
• Optional AI (bring your own key) — No shared API key in npm. Set ISOSO_AI_KEY in .env (CLI walks up from your cwd). Default scan uses AI when a key is present; use --static for local-only rules or --ai to require AI. isoso explain supports AI or --builtin (no network).
• Provider options — Documented ISOSO_AI_MODEL, ISOSO_AI_BASE_URL, and ISOSO_AI_CHAT_URL for OpenAI-compatible endpoints.
• Static vs AI — Speed, cost, determinism, and the same finding schema for both modes.
• CI — Examples with --static, --format json, and --fail-on; guidance to keep AI keys in secrets only when you intend to run AI in CI.
• Security & compliance — Source-level analysis limits, no WCAG/legal guarantee, AI data sent to your provider, and secrets hygiene (.env / .gitignore).

Install / upgrade

npm install -D @isoso.dev/isoso@0.3.5
# or
npx @isoso.dev/isoso@0.3.5 scan