@orionscanner/cli 0.5.3 → 0.5.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -10,8 +10,8 @@
10
10
  </p>
11
11
 
12
12
  <p align="center">
13
- <a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.5.3-cb3837?logo=npm" alt="npm" /></a>
14
- <img src="https://img.shields.io/badge/version-0.5.3-blue.svg" alt="Version 0.5.3" />
13
+ <a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.5.4-cb3837?logo=npm" alt="npm" /></a>
14
+ <img src="https://img.shields.io/badge/version-0.5.4-blue.svg" alt="Version 0.5.4" />
15
15
  <img src="https://img.shields.io/badge/security-In--House%20Core-emerald.svg" alt="Security" />
16
16
  <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-lightgrey.svg" alt="Platform" />
17
17
  </p>
@@ -112,7 +112,7 @@ Every scan generates self-contained executive intelligence reports in `ORION SCA
112
112
  Orion suppresses duplicate/generated-file noise, learns from your `.orion-feedback.json` corrections, and honors inline `# orion:ignore` comments — delivering actionable findings you can trust.
113
113
 
114
114
  ### 🤖 Optional AI Verification (Bring Your Own Key)
115
- For an extra layer of confirmation on top of the fully offline static engines, Orion can optionally send its highest-severity findings to an LLM for a second opinion using **your own API key** for Anthropic, OpenAI, DeepSeek, Grok, OpenRouter, or NVIDIA. This is opt-in and disabled by default; without a key and explicit network permission, Orion runs entirely offline as always.
115
+ For an extra layer of confirmation on top of the fully offline static engines, Orion can optionally send its top findings to an LLM in a single combined call for a second opinion, using **your own API key**. That one call confirms/refutes each finding, suggests a severity re-assessment where the assigned one looks off, notes real-world exploitability, proposes a tailored fix, and drafts the report's executive summary — all shown directly on each finding in the HTML report. This is opt-in and disabled by default; without a key and explicit network permission, Orion runs entirely offline as always.
116
116
 
117
117
  ---
118
118
 
package/dist/orion.exe CHANGED
Binary file
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@orionscanner/cli",
3
- "version": "0.5.3",
3
+ "version": "0.5.4",
4
4
  "description": "Orion Security Suite - Proprietary In-House Code Intelligence, SAST & Architecture Auditing Platform",
5
5
  "main": "bin/orion.js",
6
6
  "bin": {