RepoDNA 1.5.0

RepoDNA v1.5.0 strengthens evidence-based repository review, safer
findings exports, and local control over saved analysis history. It adds
confirmed record deletion for desktop and local-server users and improves
release reliability, while preserving offline-first operation and avoiding
unsupported generative-AI claims.

Highlights

• Delete saved analysis records or an entire repository's stored history
  from the desktop or local server, with confirmation and unchanged source code.
• Preview selected findings locally before exporting CSV, JSON, or Markdown,
  with explicit confirmation and clear warnings about unreviewed data.
• Review baseline CI changes with per-file module ownership, immediate
  dependency context, and bounded, escaped Markdown path hints.
• Make finding deltas deterministic for repeated IDs and avoid false file
  modifications from ambiguous duplicate-path hashes.
• Check the exact Rust workspace dependency inventory and package versions
  in both Cargo lockfiles before a release can publish.
• Preserve local-first, opt-in extractive AI evidence and independent
  evaluation requirements; no generative model capability is claimed.

Added

• Add confirmed deletion of one saved scan or a repository's complete stored
  analysis history, available from desktop and local-server History controls.
  Enforce exact scan ownership and repository IDs, update database history,
  and clean up local analysis artifacts without deleting original source
  repositories (#211).
• Show the first associated file path and remaining-path count for introduced
  and resolved findings in bounded Markdown CI impact summaries, making review
  hints easier to locate without asserting an exact source-evidence line.
• Require a local, bounded preview and explicit save confirmation before
  downloading filtered Findings CSV, JSON, or Markdown. Show selection counts
  and explain that unseen data is neither scanned for secrets nor redacted (#195).
• Include before-and-after per-file module ownership in structured CI baseline
  impact (changes.architecture.fileOwners), with bounded Markdown summaries
  and regression tests for changed module boundaries (#198).

Fixed

• Set the Windows desktop executable and installer publisher to RepoDNA
  rather than accidentally displaying github in the Explorer Company field.
  Keep the stable app identifier and enforce publisher metadata in release checks.
• Verify the exact internal Rust package inventories in both Cargo lockfiles,
  including the CLI, WebAssembly, desktop and xtask packages. Reject missing,
  duplicate, unexpected or out-of-sync entries before packaging.
• Reject a missing, duplicated, or misdirected internal Rust workspace dependency
  during release metadata checks, rather than relying on a minimum dependency
  count. Keep the local testkit path intentionally unversioned.
• Treat conflicting or missing hashes on duplicate imported file paths as
  unknown in baseline comparisons, preventing input-order-dependent or falsely
  reported modifications. Keep rename output as separate added/removed paths.
• Make baseline CI finding deltas and --new-only policy checks deterministic
  when imported artifacts repeat a finding ID with conflicting severity. Use
  the highest-severity variant for machine-readable impact and annotations,
  regardless of input order.
• Prevent unrelated nested paths from being incorrectly attributed to the root
  module in baseline CI impact results (#197).

Documentation

• Explain the stable-vs-development feature boundary, CI review semantics,
  safe sharing limitations, and required v1.5.0 release gates.

Downloads

• repodna-1.5.0-<target>: the repodna command line, with the web interface of
  repodna serve built in. The Linux builds are static and run on any distribution.
• repodna-1.5.0-wasm32-wasip1.zip: RepoDNA's analysis, reports, and cards as
  WebAssembly, the program the web version runs, for WASI runtimes:
  wasmtime run --dir .::/my-project repodna.wasm analyze /my-project (without Git
  history).
• RepoDNA_1.5.0_amd64.deb, RepoDNA-1.5.0-1.x86_64.rpm,
  RepoDNA_1.5.0_universal.dmg, RepoDNA_1.5.0_x64_en-US.msi,
  RepoDNA_1.5.0_x64-setup.exe, and for Windows on Arm
  RepoDNA_1.5.0_arm64_en-US.msi and RepoDNA_1.5.0_arm64-setup.exe: the
  desktop app.
• ghcr.io/sanskarin/repodna:1.5.0: a container image with the command line and
  Git, for CI jobs: docker run --rm -v "$PWD:/work" ghcr.io/sanskarin/repodna analyze .
• ghcr.io/sanskarin/repodna-web:1.5.0: the web interface, served on port 8080, for
  your own network: docker run --rm -p 8080:8080 ghcr.io/sanskarin/repodna-web
• npm packages on npmjs.com and GitHub Packages: npm install --global @sanskarin/repodna
  installs the command line, with one package per platform;
  npx @sanskarin/repodna-web runs the web interface on this machine;
  npx @sanskarin/repodna-wasm analyze . analyzes with the WebAssembly program, on any
  system Node.js runs on, and runs it in browsers too;
  @sanskarin/repodna-schema and @sanskarin/repodna-visualization are the TypeScript
  libraries.
• repodna-1.5.0-winget-manifests.zip: WinGet community manifests for
  the Windows desktop app (Sanskar.RepoDNA) and CLI (Sanskar.RepoDNA.CLI).
  After Microsoft accepts the manifests, install and upgrade through winget.
• SHA256SUMS.txt: checksums of every file.
• Web version: https://sanskarin.github.io/RepoDNA/ — analyze a folder or an archive, or open analyses and the demo, in your browser: nothing to install, nothing uploaded.

The binaries are not code-signed, so macOS and Windows ask for confirmation the first time they start; see the installation guide.

More open-source projects by Sanskar, the creator of RepoDNA: https://sanskarin.github.io