nsauditor-ai 0.2.6 → 0.2.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +2 -2
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -17,9 +17,9 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
17
17
 
18
18
  ## What's New
19
19
 
20
- **Latest: CE 0.2.6 + Enterprise 0.19.1** (June 2026) — paired pin for **EE 0.19.1** "Confirmed false-negative batch": seven gauntlet-confirmed Tier-B false-negatives across the Pro/Enterprise cloud auditors, each TDD'd and independently adversarially reviewed — AWS IAM prefix-glob privilege-escalation + access-key hygiene dead-code (1030); a wildcard-Principal SQS queue-policy audit at parity with SNS (1150); air-gapped KMS `CreateGrant`/`GenerateDataKey` effective-decrypt (1130); versioned-bucket noncurrent-version disposal via `GetBucketVersioning` (1120); deprecated Lambda runtimes (`provided` AL1) + a no-more-allowlist-fail-open runtime check (1080); GCP OIDC-impersonation / WIF-provider admin-equivalence (1025); and VPC-endpoint sensitive-action matching by service namespace (1160). Plugin count UNCHANGED at 28; all six coverage matrices UNCHANGED; **CE has no code change (paired pin)**.
20
+ **Latest: CE 0.2.7 + Enterprise 0.19.2** (June 2026) — paired pin for **EE 0.19.2** "Confirmed false-negative tail": six more gauntlet-confirmed Tier-B false-negatives across the Pro/Enterprise cloud auditors, each TDD'd and independently adversarially reviewed — Azure Key Vault legacy access-policy per-verb breadth (a 2-verb decrypt+unwrapKey envelope-decryption grant now flags) + two surfaced titlePattern anchor-drifts + drift-detector closure (1222); broad-but-not-full **public** GCP firewall source ranges HIGH, RFC1918 discounted (1021); AWS KMS PendingDeletion keys now policy-audited the deletion is reversible (1070); a CodePipeline sticky approval-latch each production stage now needs its own gate (1100); GCP Storage bucket-enumeration truncation evidence-gap, class-O-routed (1024); and a CloudTrail data-events read-coverage caveat WriteOnly drops S3 GetObject exfiltration events (1040). Plugin count UNCHANGED at 28; all six coverage matrices UNCHANGED; **CE has no code change (paired pin)**.
21
21
 
22
- **Prior: CE 0.2.5 + Enterprise 0.19.0** — paired pin for EE 0.19.0 "No silent false-clean" (per-region evidence-gap + class-O routing + swallow retrofits + air-gapped CVE/KMS criticals + AI-egress redaction). See [CHANGELOG.md](./CHANGELOG.md).
22
+ **Prior: CE 0.2.6 + Enterprise 0.19.1** — paired pin for EE 0.19.1 "Confirmed false-negative batch" (7 cloud plugins hardened: 1030/1150/1130/1120/1080/1025/1160). See [CHANGELOG.md](./CHANGELOG.md).
23
23
 
24
24
  → Full release history: **[CHANGELOG.md](./CHANGELOG.md)**
25
25
  → See a sample EE scan output: **[walk-through with synthetic Acme Corp AWS account](https://www.nsauditor.com/ai/docs/sample-scan/)** (no signup required)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nsauditor-ai",
3
- "version": "0.2.6",
3
+ "version": "0.2.7",
4
4
  "description": "Modular AI-assisted network security audit platform — Community Edition",
5
5
  "type": "module",
6
6
  "private": false,