@codacy/verity-cli 0.33.0-experimental.d60f544 → 0.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/bin/verity.js +852 -668
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -107,6 +107,22 @@ repository — the reviewer, the agent, and you.**
|
|
|
107
107
|
ask. It is stored as `source: agent` — Verity thought this, nobody checked it —
|
|
108
108
|
and `--confirmed` marks the words a person authored.
|
|
109
109
|
|
|
110
|
+
## [0.32.7] — 2026-09-16
|
|
111
|
+
|
|
112
|
+
**Static analysis works on Windows.**
|
|
113
|
+
|
|
114
|
+
- **`@codacy/analysis-cli` is found on Windows.** Verity looked for it by running
|
|
115
|
+
`which`, which does not exist in `cmd.exe`. Every Windows machine therefore
|
|
116
|
+
reported the analyzer missing even when it was installed and working: static
|
|
117
|
+
analysis was silently skipped, and `verity init` fell back to documented Trivy
|
|
118
|
+
pattern ids instead of deriving them from your project. Binaries are now found
|
|
119
|
+
by walking `PATH` with `PATHEXT`, which also picks up the `.cmd` shims npm
|
|
120
|
+
installs. The same broken probe was used for `claude` and for `verity` itself.
|
|
121
|
+
- **A missing analyzer is no longer reported as a clean scan.** When
|
|
122
|
+
`@codacy/analysis-cli` was not installed, Verity sent an empty result that
|
|
123
|
+
looked identical to a scan that ran and found nothing. It now says the analyzer
|
|
124
|
+
did not run. No gate decision changes as a result of this.
|
|
125
|
+
|
|
110
126
|
## [0.32.6] — 2026-09-14
|
|
111
127
|
|
|
112
128
|
**The knowledge base is no longer committed to git.**
|