Extension Store Readiness Auditor v1.1.0

Extension Store Readiness Auditor 1.1.0

This release adds versioned policy snapshots and report-to-report readiness comparison.

• Loads validated policy profiles with an ID, review date, target stores, and official policy sources.
• Enforces profile-specific manifest fields and packaged files.
• Applies per-store severity overrides while retaining the built-in audit contract.
• Records canonical policy provenance and SHA-256 identity in report schema version 2.
• Compares a current audit with a baseline to show new, resolved, and unchanged findings.
• Adds --policy and --baseline command-line options.

Verification covered Python 3.10 and 3.14 on Windows, macOS, and Linux, 18 tests with 94.53% coverage, Ruff, strict mypy, dependency audit, package builds, and CodeQL.

Extension Store Readiness Auditor 1.0.0

Initial public release.

• Audits unpacked and packaged browser extensions, including ZIP, XPI, and CRX inputs.
• Reports stable finding codes, severity, evidence, target stores, and package fingerprints.
• Checks Manifest V3 metadata, sensitive permissions, broad hosts, unsafe CSP and remote-code patterns, package debris, Firefox IDs, and icons.
• Enforces safe archive boundaries and supports Markdown or JSON output.

Verified across Windows, macOS, and Linux with Python 3.10 and 3.14. CodeQL and the isolated dependency audit passed.