Skip to content

PhantomDep v1.0.0

Choose a tag to compare

View all tags
@thinkflow19 thinkflow19 released this 29 Jul 07:00
v1.0.0
11e6289

First public release of PhantomDep — a local-first dependency firewall for AI coding agents. Catches hallucinated, squatted, and malicious packages before they reach your repo.

Added

  • phantomdep replay — iterates the loaded Phantom-DB and shows what's currently caught against the live registry.
  • phantomdep benchmark — microbenchmark harness with p50/p95/max for the four canonical scenarios.
  • assets/badges/protected-by-phantomdep.svg — embeddable badge for downstream READMEs.
  • docs/BENCHMARK.md — public, reproducible benchmark page with fair head-to-head.
  • assets/demos/ — 5 deterministic VHS-rendered demo GIFs (headline, doctor, scan-polyglot, hook, replay).
  • VS Code extension icon (extensions/vscode/icon.png).
  • Distribution channel skeletons: dist/homebrew/phantomdep.rb, dist/npm/, dist/pypi/phantomdep/.
  • Makefile with build, test, bench, demo, demo-render, clean targets.
  • CONTRIBUTING.md, SECURITY.md.

Changed

  • All workspace versions bumped from 0.x → 1.0.0.

Highlights from the 0.x line

  • Install-time firewall (phantomdep wrap) for 8 package managers: pip, uv, poetry, npm, pnpm, yarn, cargo, go.
  • MCP server, Claude Code PreToolUse hook, and LSP server with VS Code/Cursor/Windsurf extension.
  • Multi-ecosystem scanning (PyPI, npm, crates.io, Go modules) with SARIF 2.1.0 and Markdown PR-comment output.
  • SQLite cache with split TTLs; Phantom-DB feeder + verifier pipelines.

Assets

CI-built binaries (each archive contains the phantomdep executable; .sha256 files attached alongside):

Asset sha256
phantomdep-aarch64-apple-darwin.tar.gz f8d4212b2393b69efb63b749e674ae2042722b794c2defb0122407cb99f59821
phantomdep-x86_64-apple-darwin.tar.gz cfec8f19eea7d9ffa4d877c65a0e82bf184964c8102a59d6d6f87d4d98041896
phantomdep-aarch64-unknown-linux-gnu.tar.gz 982121c01f6b99f7f9b07071ca78e51fd80a3f553adeaa816e7f51ebfc1384f9
phantomdep-x86_64-unknown-linux-gnu.tar.gz d393bc850c9310e903303f2699d9c4f8edd24b1cc0171d69451400a59d26a9d6
phantomdep-x86_64-pc-windows-msvc.zip f26fb3d1a23aed73997eda432ce7cc8eaede1bb125775d88ff62f72d63b1b962

Full changelog: CHANGELOG.md

What's Changed

  • release: PhantomDep v1.0.0 — first public release by @thinkflow19 in #1

New Contributors

Full Changelog: v0.0.1...v1.0.0

Contributors

thinkflow19
Assets 12
Loading