foxguard 0.7.0 → 0.8.0

package/README.md

@@ -1,6 +1,6 @@
 # foxguard
 
-Sub-second local security scanning for real codebases.
+A security scanner as fast as a linter, written in Rust.
 
 ```sh
 npx foxguard .

package/bin/foxguard

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-const { execFileSync, execSync } = require("child_process");
+const { execFileSync } = require("child_process");
 const fs = require("fs");
 const path = require("path");
 const os = require("os");
@@ -48,35 +48,6 @@ function getBinaryName() {
   return os.platform() === "win32" ? "foxguard.exe" : "foxguard";
 }
 
-// Check if cargo-installed foxguard exists
-function findCargoInstall() {
-  try {
-    const cargoHome = process.env.CARGO_HOME || path.join(os.homedir(), ".cargo");
-    const cargoBin = path.join(cargoHome, "bin", getBinaryName());
-    if (fs.existsSync(cargoBin)) {
-      return cargoBin;
-    }
-  } catch {}
-
-  // Try PATH
-  try {
-    const which = os.platform() === "win32" ? "where" : "which";
-    const result = execSync(`${which} foxguard 2>/dev/null`, {
-      encoding: "utf8",
-    }).trim();
-    if (result && !result.includes("node_modules")) {
-      // Resolve symlinks to avoid finding ourselves (the npm wrapper)
-      const resolved = fs.realpathSync(result);
-      const thisScript = fs.realpathSync(__filename);
-      if (resolved !== thisScript) {
-        return result;
-      }
-    }
-  } catch {}
-
-  return null;
-}
-
 function download(url) {
   return new Promise((resolve, reject) => {
     const get = (u) => {
@@ -151,18 +122,11 @@ async function downloadBinary() {
 }
 
 async function main() {
-  // 1. Check for cargo-installed binary
-  const cargoBin = findCargoInstall();
-  if (cargoBin) {
-    try {
-      execFileSync(cargoBin, process.argv.slice(2), { stdio: "inherit" });
-      return;
-    } catch (e) {
-      process.exit(e.status || 1);
-    }
-  }
-
-  // 2. Download or use cached binary
+  // Always resolve to the binary matching the npm package version. A
+  // previously-installed foxguard on PATH (cargo, Homebrew, etc.) may be
+  // an older version that does not understand newer subcommands, so we
+  // ignore it. Users who want their own foxguard can invoke it directly
+  // instead of via `npx`.
   const bin = await downloadBinary();
   try {
     execFileSync(bin, process.argv.slice(2), { stdio: "inherit" });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "foxguard",
-  "version": "0.7.0",
-  "description": "Security scanner as fast as a linter. 170+ built-in rules, 10 languages, sub-second scans.",
+  "version": "0.8.0",
+  "description": "A security scanner as fast as a linter, written in Rust. 170+ built-in rules across 10 languages.",
   "license": "MIT",
   "repository": {
     "type": "git",