v0.63.0

What's Changed

• Add lightweight oversized source scanning by @tolgaergin in #259
• Add env-gated install timing detail probes by @tolgaergin in #260
• Fix stale v2 link entries for bin shims by @tolgaergin in #261
• Expose actionable install timing detail by @tolgaergin in #262
• Add warm relink timing instrumentation by @tolgaergin in #263
• Optimize v2 reusable metadata validation by @tolgaergin in #265
• Add cold fetch speculation accounting by @tolgaergin in #266
• Add fetch task trace attribution by @tolgaergin in #267
• Add experimental v2 finalize permit limiter by @tolgaergin in #268
• Add experimental v2 source integrity policy by @tolgaergin in #269
• Add experimental installer graph path by @tolgaergin in #270
• Add trace metadata fetch attribution by @tolgaergin in #271
• Allow live experimental installer benchmarks by @tolgaergin in #272
• Require parity for live installer benchmarks by @tolgaergin in #273
• Harden experimental installer override contract by @tolgaergin in #274
• Admit local sources in installer spike by @tolgaergin in #275
• Preserve optional platform descendants in installer spike by @tolgaergin in #276
• Bound v2 fetch extraction on macOS by @tolgaergin in #277
• Overlap cold fetch with greedy resolution by @tolgaergin in #278
• Harden fetch overlap side effects by @tolgaergin in #279
• Add installer attribution metrics by @tolgaergin in #280
• Instrument direct npm metadata misses by @tolgaergin in #281
• Tune npm metadata fanout for fetch overlap by @tolgaergin in #282
• Reuse fresh v2 object integrity during link populate by @tolgaergin in #283
• Default v2 object integrity to source identity by @tolgaergin in #284
• Attribute v2 link task cost by @tolgaergin in #285
• Overlap experimental installer worklist metadata completion by @tolgaergin in #286
• Trace direct metadata request waves by @tolgaergin in #287
• Trace installer metadata range shapes by @tolgaergin in #288
• Experiment with direct npm exact version docs by @tolgaergin in #289
• Add install readiness benchmark harness by @tolgaergin in #290
• Support patches in installer readiness path by @tolgaergin in #291
• Support top npm readiness sweeps by @tolgaergin in #292
• Fix readiness warning classification by @tolgaergin in #293
• Trace direct npm metadata shape by @tolgaergin in #294
• Add npm provenance publish parity by @tolgaergin in #296
• Add guided config editor by @tolgaergin in #297
• Harden typosquat guard configuration by @tolgaergin in #298
• Add proxy release-age batch hints by @tolgaergin in #299
• Improve proxy batch metadata streaming by @tolgaergin in #300
• Productize npm firewall config by @tolgaergin in #301
• Extend npm firewall to materialization commands by @tolgaergin in #302
• Remove setup proxy mode by @tolgaergin in #303
• Fix npm wrapper binary names by @tolgaergin in #304
• Allow reviewed popular typosquat collisions by @tolgaergin in #305
• Polish whoami and firewall status output by @tolgaergin in #306
• Add npm provenance and workspace frozen coverage by @tolgaergin in #307
• Add JSON schema version and next steps by @tolgaergin in #309
• Make install JSON timing opt-in by @tolgaergin in #310
• Tighten agent JSON next steps by @tolgaergin in #311
• Update lpm init package targeting by @tolgaergin in #312
• Release 0.63.0 by @tolgaergin in #313

Full Changelog: v0.62.0...v0.63.0