correctover-scan 1.7.1 → 1.7.3

package/README.md

@@ -159,7 +159,7 @@ The free-tier daily scan allowance applies to bundle scans too (counted the same
 
 ### Web Scanner
 
-Try the online version: [correctover.com/scan](https://correctover.com/scan/)
+Try the no-install browser version (files never leave your machine): [in-browser scanner](https://correctover.com/scan.html)
 
 ## Standards Compliance
 
@@ -177,14 +177,14 @@ The free automated scan covers surface-level configuration checks. A manual Corr
 
 For first customers, if the manual audit finds no critical-severity issue, you pay nothing.
 
-- Get your free 1-page summary: email [234114134@coze.email](mailto:234114134@coze.email?subject=Free%20audit%20scan%20summary)
+- Get your free 1-page summary: email [wangguigui@correctover.com](mailto:wangguigui@correctover.com?subject=Free%20Scan%20summary%20request)
 - Learn more about the manual audit: https://correctover.com/agent-audit.html
 
 ## Links
 
 - [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
 - [CCS Standard](https://correctover.com/ccs) — Conformance Specification
-- [Web Scanner](https://correctover.com/scan/) — Online version
+- [Web Scanner](https://correctover.com/scan.html) — In-browser version, no upload
 - [GitHub](https://github.com/DSHCorrectover) — Source code
 - [Conformance test vectors](https://github.com/DSHCorrectover/ccs-conformance-vectors) — 66 signed, reproducible
 - [EMILIA interoperability](https://github.com/emiliaprotocol/emilia-protocol/pull/693) — merged joint assessment
@@ -197,7 +197,11 @@ CCS (Correctover Conformance Shape) is published as an individual Internet-Draft
 
 An Internet-Draft is an individual submission. It is not an RFC, an adopted working-group item, or IETF endorsement; the Datatracker page is authoritative for revision and status.
 
-## License
+## License & scope
 
-MIT © Correctover
+MIT © Correctover.
+
+This CLI is a **free, open-source lead-generation tool** (MIT-licensed): use it in your terminal, CI, and agent hooks (such as the [Kimi Code security hook](https://github.com/DSHCorrectover/kimi-code-security-hook)), fork it, and redistribute it under the MIT terms. External pull requests are welcome.
+
+The commercial products — the hosted zero-upload scan platform, the CCS runtime verification engine, and the manual Agent Output Audit service — are proprietary and are not part of this open-source release. See [correctover.com](https://correctover.com) for those.
 

package/index.js

@@ -14,7 +14,7 @@ const { runBundleScan, discoverBundleFiles } = require('./core/bundle-scanner');
 const { recordCall, getUpgradeMessage } = require('./core/license');
 const { formatHTMLReport, normalizeConfigFindings, normalizeBundleFindings, failHint } = require('./core/report');
 
-const VERSION = '1.7.1';
+const VERSION = '1.7.3';
 const PRODUCT = 'correctover-scan';
 const JS_EXT = new Set(['.js', '.mjs', '.cjs', '.ts']);
 

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "correctover-scan",
-  "version": "1.7.1",
+  "version": "1.7.3",
   "description": "Correctover Security Scanner — CCS audit for MCP configurations AND published JS bundles/npm packages. Detects hardcoded secrets, RCE, SSRF, credential hijacking against OWASP AISVS 1.0.",
   "main": "index.js",
   "bin": {
-    "correctover-scan": "./index.js"
+    "correctover-scan": "index.js"
   },
   "scripts": {
     "test": "node test.js",
@@ -47,7 +47,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/DSHCorrectover/correctover-scan"
+    "url": "git+https://github.com/DSHCorrectover/correctover-scan.git"
   },
   "homepage": "https://correctover.com/scan",
   "bugs": {