CapLock v1.0.0

First stable release of CapLock.

CapLock reviews and sandboxes npm and pnpm dependency lifecycle scripts with least-privilege access.

Highlights

• Windows AppContainer sandboxing
• Linux Bubblewrap + seccomp sandboxing
• macOS sandbox support
• npm and pnpm lifecycle interception
• Filesystem isolation
• Secret environment filtering
• Default-deny network policy
• Nested child-process containment
• Cross-platform E2E coverage

Validated on Windows, Ubuntu Linux, and macOS with npm and pnpm.