Skip to content

v1.0.2

Choose a tag to compare

View all tags
@sparkvibe-io sparkvibe-io released this 28 Feb 17:43
v1.0.2
617d6e4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bug Fixes

  • CVSS vector parsing: OSV API returns CVSS vector strings, not numeric scores — all vulnerabilities were incorrectly mapped to LOW severity
  • Stale version in status(): core.py hardcoded "0.2.0" instead of using __version__
  • Double audit logging: scan_dependencies_in_directory logged twice
  • Silent file/manifest skipping: Added logging for files and manifests skipped during directory scans
  • Notification callback errors: Wrapped MCP notification callbacks to prevent scan aborts on broken pipes
  • Overly broad exception handling: Narrowed bare except Exception blocks in osv.py and manifest.py

Added

  • MCP registry ownership tag (mcp-name) in README for Official MCP Registry validation
  • dependencies and directory_dependencies to audit_log scan_type enum

Full Changelog: v1.0.1...v1.0.2

Assets 2
Loading