Releases: BunsDev/codeql-sdk
Releases · BunsDev/codeql-sdk
codeql-sdk v1.1.0
What's changed
- Added GitHub maintainer risk scoring for skill audits.
- Infers a GitHub owner from skill metadata or accepts an explicit owner override.
- Uses the GitHub REST API to assess public repository footprint, account age, followers, organization ownership, and skill-like repository counts.
- Includes github-readme-stats reputation enrichment via
https://github-readme-stats.vercel.app/api. - Adds CLI flags:
--github-risk,--github-owner,--github-token,--github-skill-threshold, and--no-github-readme-stats. - Adds
AuditResult.githubRiskplus exported helpersassessGitHubUserRiskandinferGitHubOwnerFromSkill.
Install
npm install codeql-sdk@1.1.0Or globally:
npm install -g codeql-sdk@1.1.0Verification
npm run buildnpm test -- --runInBandnpm run lintnpm pack
Assets
codeql-sdk-1.1.0.tgz— npm package tarball.checksums-sha256.txt— SHA-256 checksum for the tarball.