@merupatel/reachable 1.0.5 → 1.0.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +7 -0
- package/README.md +4 -0
- package/dist/cli/index.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,10 @@
|
|
|
1
|
+
## [1.0.6](https://github.com/Meru143/reachable/compare/v1.0.5...v1.0.6) (2026-04-04)
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
### Bug Fixes
|
|
5
|
+
|
|
6
|
+
* scope reachable audit to production dependencies ([3b1a280](https://github.com/Meru143/reachable/commit/3b1a2803dbbd44a5341f9e0ce2096b933e4756b5))
|
|
7
|
+
|
|
1
8
|
## [1.0.5](https://github.com/Meru143/reachable/compare/v1.0.4...v1.0.5) (2026-03-20)
|
|
2
9
|
|
|
3
10
|
|
package/README.md
CHANGED
|
@@ -8,6 +8,10 @@
|
|
|
8
8
|
|
|
9
9
|
It parses JavaScript and TypeScript with tree-sitter, builds a project call graph, queries OSV advisories, and reports whether the vulnerable symbol is reachable, unknown, or unreachable from your entry points.
|
|
10
10
|
|
|
11
|
+
Live page: [merup.me/reachable](https://merup.me/reachable/)
|
|
12
|
+
|
|
13
|
+
The point is not to replace package-level scanners. It is to rank the work that actually matters by asking the next question those tools cannot answer on their own: does your code reach the vulnerable symbol?
|
|
14
|
+
|
|
11
15
|
|
|
12
16
|
|
|
13
17
|
- Cut false-positive dependency noise by separating `REACHABLE`, `UNKNOWN`, and `UNREACHABLE` findings.
|
package/dist/cli/index.js
CHANGED
|
@@ -209849,7 +209849,7 @@ var import_promises = require("timers/promises");
|
|
|
209849
209849
|
// package.json
|
|
209850
209850
|
var package_default = {
|
|
209851
209851
|
name: "@merupatel/reachable",
|
|
209852
|
-
version: "1.0.
|
|
209852
|
+
version: "1.0.6",
|
|
209853
209853
|
description: "Local-first vulnerability reachability CLI for JavaScript and TypeScript",
|
|
209854
209854
|
bin: {
|
|
209855
209855
|
reachable: "dist/cli/index.js"
|