Changelog

Updated npm maintainer email to engineering@vigile.dev

No code changes from v0.2.5 — soft republish for registry metadata

Fixed large scan results getting cut off (stdout buffer flush before exit)

Corrected severity levels for SP-038 and SP-146 from "info" to "low"

Removed deprecated TP-003 pattern

BaaS Security Scanner — Supabase and Firebase configuration scanning

CVE detector for known vulnerabilities in MCP server dependencies

Bundle analyzer for detecting bloated or suspicious dependencies

16 Sentinel runtime monitoring patterns

Trust score model now includes BaaS configuration analysis

Agent Skill scanning — 27 detection patterns for SKILL.md and .mdc files

Multi-platform discovery: Claude Desktop, Cursor, Claude Code, Windsurf, VS Code

Ed25519 signature verification for scan results

Expanded MCP detection from 18 to 22 patterns

vigile-mcp — query trust scores from Claude Code, Cursor, or any MCP client

Listed on Official MCP Registry, mcp.so, and mcpservers.org

Initial public release of vigile-scan CLI

Trust scoring — 5-factor composite model (0-100)

MCP Server Registry with automated crawling

REST API with JWT authentication and API keys

Web dashboard with scan history and trust score lookup