proof-of-commitment 1.34.0 → 1.35.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +6 -0
- package/package.json +1 -1
package/index.js
CHANGED
|
@@ -642,6 +642,12 @@ function printTable(results, { totalScanned, totalCritical, lockfile } = {}) {
|
|
|
642
642
|
);
|
|
643
643
|
console.log(breakdown);
|
|
644
644
|
}
|
|
645
|
+
|
|
646
|
+
// Show WARN-level risk flags inline (dormant publishers, stale releases, etc.)
|
|
647
|
+
const warnFlags = (pkg.riskFlags || []).filter(f => f.startsWith('WARN:'));
|
|
648
|
+
for (const flag of warnFlags) {
|
|
649
|
+
console.log(clr(c.yellow, ` ⚠ ${flag}`));
|
|
650
|
+
}
|
|
645
651
|
}
|
|
646
652
|
|
|
647
653
|
console.log(divider);
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "proof-of-commitment",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.35.0",
|
|
4
4
|
"mcpName": "io.github.piiiico/proof-of-commitment",
|
|
5
5
|
"description": "Supply chain security risk scorer for npm, PyPI, Cargo, and Go packages — behavioral signals that can't be faked",
|
|
6
6
|
"type": "module",
|