Repository Issue Activity (beta)

#74 fix(npm): hoisted transitive packages are marked as direct

#2 Add Windows default root discovery

#68 Updated threat intel for keyv supply chain attack 03 August 2026?

#67 New release needed?

#64 osvcatalog: all-versions (range-only) MAL records are dropped — ~92% of npm malicious packages

#52 Add per-ecosystem record counts to scan_summary

#56 Feature: support scoped roots / multi-root scanning to avoid full home traversal

#59 Enable GitHub immutable releases

#49 Add windows build to release CI workflow

#55 🤖 Code Audit: 30 potential issue(s) found

#47 feat: read package manager configs to determine cooldown configuration

#35 use UUID or sha256:-prefixed record_id so credential-detection regexes don't false-positive

#48 Add --quiet flag to suppress info-level diagnostics on stderr

#21 Add osv.dev as package source

#32 feat: scan agent skills

#43 Better documentation for noobs

#39 feat(ecosystem): add Cargo (Rust) package scanning support

#40 Support MCP servers defined in ~/.claude.json

#7 Inventory source: Homebrew packages

#31 distribution: package bumblebee for nix/nixos via flake/package

#18 [Security] Pin govulncheck version in ci.yml to prevent supply chain risks

#27 Distribution: ship bumblebee via Homebrew for easier macOS adoption

#22 feat(cli): add optional human-readable scan output

#19 any github actions ?

#15 SARIF export please