v0.4.0

Changelog

• 5e78e71 Accept package names as arguments in watch command (#55)
• 3bb5bcd Add code analyzers for release-time detection (#54)
• a6d7a02 Add contextual scoring for metadata + code analysis (#57)
• 46f93e1 Add diff analysis pipeline and CLI command (#56)
• 9defe09 Add diff model types for release-time code analysis (#51)
• 820f159 Add self-update command (#50)
• 1b15b6c Add tarball collector and file tree diffing engine (#53)
• 6059934 Add webhook and Slack alerting backends (#58)
• 8604c91 Sort signal table by score and slim CI (#60)
• 2240609 Update issue templates (#52)
• 45301ac Wire diff analysis and alerting into watch runner (#59)

v0.3.0

Changelog

• d75a272 Add Homebrew install to README (#39)
• 89b676f Fix race condition in watch runner, deterministic publisher selection, use strings.Builder in wrapText (#48)
• 0d27293 Hoist keyword slices, pre-allocate findings, add CLI examples (#49)
• 9d823c8 Show description, maintainers, and repo URL in scan output (#42)
• a4faa65 feat: add SARIF output, severity sorting, and threshold flag (#43)
• a4adf07 feat: watch command, state persistence, and CI workflows (#45)
• a40e254 fix: guard against allocation size overflow in mergeReleasesAndTags (#46)
• e5dba71 fix: print error message before exiting on failure (#47)
• f5940bf refactor: extract scan pipeline into reusable package (#44)
• 0041a77 refactor: quiet JSON output, consolidate ClassifyRisk, fix style (#41)

v0.2.0

Changelog

• 6ae2e79 Update project description in README.md (#32)
• adf6c76 feat: Phase 2 Scorecard integration and GitHub tag correlation (#30)
• c404262 fix(ci): use correct goreleaser action ref (#37)
• d9346db fix(ci): use separate PAT for Homebrew tap pushes (#38)
• d4f01b5 refactor(collector): shared transport, scorecard tests, readme update (#33)
• a2865fb refactor(github,scorecard): deduplicate client code and optimize analyzers

v0.1.0

What's Changed

• fix(cli,collector): scan reliability and input validation by @jakeva in #11
• ci: smoke test workflow for PRs by @jakeva in #12
• fix: remove package-specific references from code and tests by @jakeva in #13
• chore: remove testdata fixtures with personal info by @jakeva in #14
• ci: update actions to Node.js 24 compatible versions by @jakeva in #15
• fix(analyzer): count all versions in bus factor denominator by @jakeva in #16
• ci(smoke): scan random packages from npm instead of a fixed list by @jakeva in #17
• fix(collector): use build version in User-Agent header by @jakeva in #18
• chore(cli): remove dead --verbose flag by @jakeva in #19
• refactor: deduplicate comma formatting into internal/format by @jakeva in #20
• fix(cache): evict expired entries on read by @jakeva in #21
• chore(gitignore): add coverage.html by @jakeva in #22
• chore(makefile): add coverage target by @jakeva in #23
• chore(goreleaser): add sha256 checksums by @jakeva in #24
• docs(readme): document timeout and no-cache flags by @jakeva in #25
• fix(output): ANSI aware padding in table renderer by @jakeva in #26
• test(collector): add unit tests for npm clients by @jakeva in #27
• refactor: deduplicate personal email domain list by @jakeva in #28
• perf: parallelize network fetches during scan by @jakeva in #29

New Contributors

• @jakeva made their first contribution in #11

Full Changelog: https://github.com/chainrecon/chainrecon/commits/v0.1.0