Skip to content

Releases: thebasedcapital/pfw

pfw v0.3.0 — Audit Log + CVSS Fix

Choose a tag to compare

@thebasedcapital thebasedcapital released this 26 Mar 00:19

What's New

  • SQLite audit log — every package check is recorded with full decision context
    • pfw log — table view, pfw log stats — summary, pfw log --json — for agents
  • CVSS-aware severity — deps.dev advisories now use actual CVSS scores instead of defaulting to HIGH
  • Transitive dep fix — tarball downloads warn on vulns but only hard-block on local policy

Install

npm install -g github:thebasedcapital/pfw
pfw install --yes