correctover-scan 3.1.0 → 3.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +11 -0
  2. package/index.js +1 -1
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -18,6 +18,17 @@ the license change is not retroactive.
18
18
 
19
19
  > Security scanner for MCP servers and AI agents — detects credential exposure, SSRF, command injection risk and missing auth across your MCP configuration. 14 checks mapped to OWASP AISVS 1.0. Run anywhere with `npx correctover-scan`.
20
20
 
21
+ ---
22
+
23
+ ### 🇨🇳 国内用户 · 支付宝一键购买
24
+
25
+ 本工具的合规授权与批量能力可通过支付宝 SkillPay 获取:
26
+
27
+ - 打开货架:https://skillpay.alipay.com/public/correctover
28
+ - 或把这行发给你的 AI 助手:**请通过 SkillPay 购买并安装 Skill「CCS收据批量审计」**
29
+
30
+ ---
31
+
21
32
  ![npm](https://img.shields.io/npm/v/correctover-scan)
22
33
  ![license](https://img.shields.io/npm/l/correctover-scan) [![IETF Internet-Draft](https://img.shields.io/badge/IETF-draft--correctover--ccs-blue)](https://datatracker.ietf.org/doc/draft-correctover-ccs/)
23
34
 
package/index.js CHANGED
@@ -15,7 +15,7 @@ const { recordCall, getUpgradeMessage } = require('./core/license');
15
15
  const skillpay = require('./core/skillpay');
16
16
  const { formatHTMLReport, normalizeConfigFindings, normalizeBundleFindings, failHint } = require('./core/report');
17
17
 
18
- const VERSION = '3.1.0';
18
+ const VERSION = '3.1.1';
19
19
  const PRODUCT = 'correctover-scan';
20
20
  const JS_EXT = new Set(['.js', '.mjs', '.cjs', '.ts']);
21
21
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "correctover-scan",
3
- "version": "3.1.0",
3
+ "version": "3.1.1",
4
4
  "description": "Correctover Security Scanner — CCS audit for MCP configurations AND published JS bundles/npm packages. Detects hardcoded secrets, RCE, SSRF, credential hijacking against OWASP AISVS 1.0.",
5
5
  "main": "index.js",
6
6
  "bin": {