v1.6.5 — Devbox projects now scan cleanly

Devbox projects now scan cleanly

Harness Score v1.6.5 fixes a false incomplete-scan result in repositories that use Devbox.

What changed

• .devbox/ is now treated as generated environment state and skipped during scans.
• Devbox binary symlinks such as .devbox/bin/devbox no longer trigger outside-root-symlink.
• Project-owned configuration (devbox.json, devbox.lock, and devbox.d/) remains visible to the scanner.
• Regression coverage protects this behavior across future scanner changes.

Why it matters

Previously, a generated Devbox symlink could make the entire scan incomplete and suppress the maturity verdict. Devbox repositories now receive the same deterministic, authoritative result as other supported development environments.

Install or upgrade

npx --yes harness-score

For GitHub Actions:

- uses: paladini/harness-score@v1

Published artifacts

• npm: harness-score@1.6.5
• JSR: @paladini/harness-score@1.6.5
• GitHub Action: paladini/harness-score@v1
• GitHub Packages: @paladini/harness-score@1.6.5

Thank you

Thanks to @PAHJunior for reporting the Devbox compatibility issue, implementing the fix, and adding regression coverage.