calllint 0.3.0-rc.0 → 0.3.0-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +2 -3
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1042,8 +1042,7 @@ function computeRiskClass(findings, binding) {
|
|
|
1042
1042
|
// ../../packages/risk-engine/src/computeVerdict.ts
|
|
1043
1043
|
function computeVerdict(findings, binding) {
|
|
1044
1044
|
if (findings.some((f) => f.blocker)) return "BLOCK";
|
|
1045
|
-
|
|
1046
|
-
if (unverifiable) return "UNKNOWN";
|
|
1045
|
+
if (!binding.sourceKnown) return "UNKNOWN";
|
|
1047
1046
|
if (findings.some((f) => f.severity === "high" || f.severity === "critical")) {
|
|
1048
1047
|
return "REVIEW";
|
|
1049
1048
|
}
|
|
@@ -1408,7 +1407,7 @@ function parseConfigText(text, configPath = "<inline>") {
|
|
|
1408
1407
|
function aggregate(configPath, reports, generatedAt) {
|
|
1409
1408
|
const counts = { SAFE: 0, REVIEW: 0, BLOCK: 0, UNKNOWN: 0 };
|
|
1410
1409
|
for (const r of reports) counts[r.verdict]++;
|
|
1411
|
-
const verdict = mostSevereVerdict(reports.map((r) => r.verdict));
|
|
1410
|
+
const verdict = reports.length === 0 ? "UNKNOWN" : mostSevereVerdict(reports.map((r) => r.verdict));
|
|
1412
1411
|
return {
|
|
1413
1412
|
schemaVersion: "calllint.report.v0",
|
|
1414
1413
|
reportKind: "config-summary",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "calllint",
|
|
3
|
-
"version": "0.3.0-rc.
|
|
3
|
+
"version": "0.3.0-rc.1",
|
|
4
4
|
"description": "Evidence-backed security verdicts for MCP servers and agent tools. Lint agent tool-call risk before tools run — SAFE / REVIEW / BLOCK / UNKNOWN, with evidence. Never executes the server it judges.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"mcp",
|