v0.6.0

Changelog

Features

• 19e8834: feat: detect Unicode package-name homoglyphs (@vahapogut)
• 16d294b: feat: gate pnpm installs with trustdiff checks (@vahapogut)
• a8b0ff2: feat: index crates.io dumps for bounded bulk scans (@vahapogut)
• c0a75d2: feat: monitor baseline trust and add reviewed verification tools (@vahapogut)

Bug fixes

• 8aecd31: fix(release): skip npm staging for mismatched scanner tags (#6) (@vahapogut)
• 1fab910: fix: canonicalize GuardDog temporary paths on macOS (@vahapogut)

Others

• 1f126d2: ci(bun-scanner): name the setup-node pin in the header list (@vahapogut)
• 8f99400: ci: 3.1, run the test suite under the race detector on Linux (@vahapogut)
• 8bb2286: ci: update verified artifact and SARIF action pins (@vahapogut)
• 95f6e9e: import io, sys (@vahapogut)