coderifts 1.8.2 → 1.8.3

package/dist/cli.js

@@ -3007,7 +3007,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "coderifts",
-      version: "1.8.2",
+      version: "1.8.3",
       description: "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
       author: "CodeRifts <hello@coderifts.com>",
       license: "MIT",
@@ -65177,11 +65177,16 @@ policy:
   freeze_on_risk_score: 85
 
 risk_scoring:
-  weights:
-    revenue_impact: 0.25
-    blast_radius: 0.30
-    app_compatibility: 0.25
-    security: 0.20
+  # dimension_weights is the key the engine reads (0-100 scale, relative weights)
+  dimension_weights:
+    revenue_impact: 25      # 0-100, relative weight
+    blast_radius: 30        # 0-100, relative weight
+    app_compatibility: 25   # 0-100, relative weight
+    security: 20            # 0-100, relative weight
+  # Risk band thresholds (0-100). These label the risk band in the PR comment;
+  # they do NOT change check pass/fail (that is policy.freeze_on_risk_score above).
+  # high_risk_threshold: 70
+  # critical_risk_threshold: 85
 
 linting:
   enabled: true
@@ -65230,11 +65235,16 @@ freeze_periods:
     end: "2026-06-15"
 
 risk_scoring:
-  weights:
-    revenue_impact: 0.30
-    blast_radius: 0.25
-    app_compatibility: 0.20
-    security: 0.25
+  # dimension_weights is the key the engine reads (0-100 scale, relative weights)
+  dimension_weights:
+    revenue_impact: 30      # 0-100, relative weight
+    blast_radius: 25        # 0-100, relative weight
+    app_compatibility: 20   # 0-100, relative weight
+    security: 25            # 0-100, relative weight
+  # Risk band thresholds (0-100). These label the risk band in the PR comment;
+  # they do NOT change check pass/fail (that is policy.freeze_on_risk_score above).
+  # high_risk_threshold: 70
+  # critical_risk_threshold: 85
 
 security:
   sensitive_patterns:
@@ -65290,11 +65300,16 @@ approval_matrix:
     - api-team-lead
 
 risk_scoring:
-  weights:
-    revenue_impact: 0.35
-    blast_radius: 0.30
-    app_compatibility: 0.20
-    security: 0.15
+  # dimension_weights is the key the engine reads (0-100 scale, relative weights)
+  dimension_weights:
+    revenue_impact: 35      # 0-100, relative weight
+    blast_radius: 30        # 0-100, relative weight
+    app_compatibility: 20   # 0-100, relative weight
+    security: 15            # 0-100, relative weight
+  # Risk band thresholds (0-100). These label the risk band in the PR comment;
+  # they do NOT change check pass/fail (that is policy.freeze_on_risk_score above).
+  # high_risk_threshold: 70
+  # critical_risk_threshold: 85
 
 linting:
   enabled: true
@@ -65346,11 +65361,16 @@ domains:
     sensitivity: medium
 
 risk_scoring:
-  weights:
-    revenue_impact: 0.20
-    blast_radius: 0.35
-    app_compatibility: 0.25
-    security: 0.20
+  # dimension_weights is the key the engine reads (0-100 scale, relative weights)
+  dimension_weights:
+    revenue_impact: 20      # 0-100, relative weight
+    blast_radius: 35        # 0-100, relative weight
+    app_compatibility: 25   # 0-100, relative weight
+    security: 20            # 0-100, relative weight
+  # Risk band thresholds (0-100). These label the risk band in the PR comment;
+  # they do NOT change check pass/fail (that is policy.freeze_on_risk_score above).
+  # high_risk_threshold: 70
+  # critical_risk_threshold: 85
 
 notifications:
   slack:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "1.8.2",
+  "version": "1.8.3",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",