repopilot 0.6.0 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +27 -6
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -36,16 +36,18 @@ RepoPilot runs locally and does not upload your repository.
36
36
  - Testing findings: missing test folder, source files without test counterparts
37
37
  - Framework findings for JavaScript, React, React Native, and Expo projects
38
38
  - React Native architecture profile: project kind, New Architecture, Hermes, Codegen, platform mismatch, and package manager signals
39
- - Workspace framework detection through `package.json` workspaces
39
+ - Workspace scanning (`--workspace`) for npm, yarn, pnpm, and Cargo workspaces with per-package risk summary
40
40
  - Evidence-backed findings with stable rule IDs, severity, file paths, line numbers, and snippets
41
+ - 36 built-in rules with titles, descriptions, recommendations, and docs links
41
42
  - `repopilot.toml` configuration generated by `repopilot init`
42
43
  - Baseline workflow for accepting existing findings in legacy repositories
43
44
  - CI-friendly failure thresholds with `--fail-on`
44
45
  - Git diff-aware review mode for prioritizing findings introduced by changed lines
45
- - Console, JSON, Markdown, HTML, and SARIF scan output
46
+ - Console, JSON, Markdown, HTML, and SARIF (2.1.0) scan output — SARIF includes per-result category and workspace package properties
47
+ - First-party GitHub Action wrapper with optional SARIF upload
46
48
  - Compare mode for diffing two JSON scan reports
47
49
 
48
- See [docs/rulesets.md](docs/rulesets.md) for the implemented rules and severity levels.
50
+ See [docs/rulesets.md](docs/rulesets.md) for the full list of rules and severity levels.
49
51
 
50
52
  ## Installation
51
53
 
@@ -88,6 +90,24 @@ repopilot scan . --format markdown --output repopilot-report.md
88
90
  repopilot review . --base origin/main --baseline .repopilot/baseline.json --fail-on new-high
89
91
  ```
90
92
 
93
+ Reduce scan noise while iterating:
94
+
95
+ ```bash
96
+ repopilot scan . --min-severity high
97
+ repopilot scan . --workspace --min-severity medium
98
+ ```
99
+
100
+ ## AI-Assisted Workflow
101
+
102
+ RepoPilot is a local-first safety layer for AI-assisted and vibe-coded changes. Run it after generating or refactoring code to catch newly introduced high-risk findings, workspace hotspots, missing tests, and architecture drift without uploading source code to an external service.
103
+
104
+ ```bash
105
+ repopilot review . --base origin/main --baseline .repopilot/baseline.json --fail-on new-high
106
+ repopilot scan . --workspace --min-severity medium --format markdown --output repopilot-report.md
107
+ ```
108
+
109
+ The v0.7.0 release does not add new `vibe`, `harden`, or AI prompt commands. Those are planned as deterministic post-0.7 workflows built on the existing scan and review data.
110
+
91
111
  ## Commands
92
112
 
93
113
  | Command | Alias | Description |
@@ -289,11 +309,12 @@ jobs:
289
309
 
290
310
  These are planned ideas, not current features:
291
311
 
312
+ - Vibe Check command for AI-assisted codebase readiness
313
+ - Hardening Plan output based on existing findings
314
+ - AI-agent prompt/context export
292
315
  - Change Risk Map
293
- - AI-ready review context export
294
316
  - Better architecture drift detection
295
- - First-party GitHub Action integration
296
- - Deeper React Native dependency health analysis
317
+ - Optional per-platform npm binary packages for faster installs
297
318
 
298
319
  ## Documentation
299
320
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "repopilot",
3
- "version": "0.6.0",
3
+ "version": "0.7.0",
4
4
  "description": "Local-first CLI for repository audit, architecture risk detection, baseline tracking, and CI-friendly code review.",
5
5
  "license": "MIT OR Apache-2.0",
6
6
  "repository": {