@lockhawk/core 0.2.5 → 0.2.6

package/README.md

@@ -1,12 +1,12 @@
 # @lockhawk/core
 
-The scanning engine behind [**lockhawk**](https://github.com/lockhawk/lockhawk) — lockfile
-parsing, dependency-graph building, [OSV.dev](https://osv.dev) matching, CVSS v3/v4 scoring, and
-report generation (table, JSON, SARIF, JUnit, HTML).
+The scanning engine behind [**lockhawk**](https://github.com/lockhawk/lockhawk): lockfile parsing,
+dependency graph building, [OSV.dev](https://osv.dev) matching, CVSS v3 and v4 scoring, and report
+generation (table, JSON, SARIF, JUnit, HTML).
 
 > **Most people want the CLI, not this package.** To scan a project, use
-> [`lockhawk`](https://www.npmjs.com/package/lockhawk) — `npx lockhawk scan`. Install
-> `@lockhawk/core` only if you're building a tool on top of the engine.
+> [`lockhawk`](https://www.npmjs.com/package/lockhawk) and run `npx lockhawk scan`. Install
+> `@lockhawk/core` only if you are building a tool on top of the engine.
 
 ## Install
 
@@ -24,8 +24,8 @@ console.log(result.summary, result.findings);
 ```
 
 `scan()` reads the project's lockfile (`package-lock.json`, `yarn.lock`, or `pnpm-lock.yaml`),
-resolves the full dependency tree (including transitive dependencies), queries OSV.dev — offline
-from a cached database or online via the batch API — and returns scored, de-duplicated findings.
+resolves the full dependency tree including transitive dependencies, queries OSV.dev (offline from a
+cached database or online via the batch API), and returns scored, de-duplicated findings.
 
 ## Documentation
 

package/dist/index.d.ts

@@ -390,6 +390,8 @@ interface OnlineClientOptions {
     noCache?: boolean;
     cacheTtlHours?: number;
     retries?: number;
+    /** Per-request network timeout in milliseconds (default 15s). */
+    timeoutMs?: number;
 }
 /**
  * Online OSV source. Queries the batch endpoint by package *name only* — never