Skip to content

Toolip v1.0.6 — Scanner Accuracy and Version Consistency

Choose a tag to compare

View all tags
@wbizmo wbizmo released this 11 Jul 05:02
· 67 commits to main since this release
v1.0.6
a154bad

Toolip v1.0.6 improves scanner accuracy and removes duplicated version state.

Fixes:

  • Uses package.json as the single source of truth for Toolip's version.
  • Ensures toolip --version, self-test output, reports, and published package metadata remain synchronized.
  • Prevents RegExp.exec() from being incorrectly reported as unsafe child_process.exec() usage.
  • Preserves detection of genuine direct shell exec() calls.
  • Downgrades password-like values in test fixtures to low severity instead of reporting them as high-severity production credentials.
  • Adds regression tests for scanner accuracy and version synchronization.

Verification:

  • TypeScript typecheck passes.
  • Full Vitest suite passes.
  • Production build passes.
  • CLI self-test passes.
  • npm package preview succeeds.

Built by Ashibuogwu Williams (wbizmo).

Assets 2
Loading