nsauditor-ai 0.2.4 → 0.2.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +3 -1
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -17,7 +17,9 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
17
17
 
18
18
  ## What's New
19
19
 
20
- **Latest: CE 0.2.4 + Enterprise 0.18.3** (June 2026) — paired pin for **EE 0.18.3** "GCP IAM + Azure Key Vault false-negative hardening III": an Azure Key Vault custom role granting only a narrow data-plane crypto/extraction verb (`decrypt`/`wrap`/`unwrap`/…) is now flagged; the GCP IAM impersonation BFS fail-closes on depth-cap truncation; and the googleapis-SDK-absent path fail-closes the GCP IAM dims to compliance-routed evidence-gaps instead of silently vanishing. Plugin count UNCHANGED at 28; all six coverage matrices UNCHANGED.
20
+ **Latest: CE 0.2.6 + Enterprise 0.19.1** (June 2026) — paired pin for **EE 0.19.1** "Confirmed false-negative batch": seven gauntlet-confirmed Tier-B false-negatives across the Pro/Enterprise cloud auditors, each TDD'd and independently adversarially reviewed AWS IAM prefix-glob privilege-escalation + access-key hygiene dead-code (1030); a wildcard-Principal SQS queue-policy audit at parity with SNS (1150); air-gapped KMS `CreateGrant`/`GenerateDataKey` effective-decrypt (1130); versioned-bucket noncurrent-version disposal via `GetBucketVersioning` (1120); deprecated Lambda runtimes (`provided` AL1) + a no-more-allowlist-fail-open runtime check (1080); GCP OIDC-impersonation / WIF-provider admin-equivalence (1025); and VPC-endpoint sensitive-action matching by service namespace (1160). Plugin count UNCHANGED at 28; all six coverage matrices UNCHANGED; **CE has no code change (paired pin)**.
21
+
22
+ **Prior: CE 0.2.5 + Enterprise 0.19.0** — paired pin for EE 0.19.0 "No silent false-clean" (per-region evidence-gap + class-O routing + swallow retrofits + air-gapped CVE/KMS criticals + AI-egress redaction). See [CHANGELOG.md](./CHANGELOG.md).
21
23
 
22
24
  → Full release history: **[CHANGELOG.md](./CHANGELOG.md)**
23
25
  → See a sample EE scan output: **[walk-through with synthetic Acme Corp AWS account](https://www.nsauditor.com/ai/docs/sample-scan/)** (no signup required)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nsauditor-ai",
3
- "version": "0.2.4",
3
+ "version": "0.2.6",
4
4
  "description": "Modular AI-assisted network security audit platform — Community Edition",
5
5
  "type": "module",
6
6
  "private": false,