All pull requests

Pull requests

• feat(supply-chain): inspect locked npm dependency contents

  #952·YMuskrat opened Oct 29, 2026Contributor·

  ·
  1

• fix(markdown): preserve bounded inline and list-fence ownership

  #950·kshitijrajes opened Oct 29, 2026·

  ·

• fix(artifact-integrity): contain matcher-local timeouts

  #949·kshitijrajes opened Oct 29, 2026·

  ·

• fix(static): preserve proven quote boundaries in completeness checks

  #948·yashrajp22 opened Oct 29, 2026Collaborator·

  ·

• fix(scanner): tighten bounded parser ownership

  #947·kshitijrajes opened Oct 29, 2026·

  ·
  8

• fix(llm): validate completion and recover malformed assessments

  #946·yashrajp22 opened Oct 29, 2026Collaborator·

  ·
  2

• fix(tm1): keep unsafe options within their command

  #944·deepujain opened Oct 29, 2026Contributor·

  ·
  1

• feat(tp4): support bounded assessment batch capacity

  #942·mbakman opened Oct 28, 2026·

  ·
  1

• fix(sc4): scope npm lock resolution to owning projects

  #940·chrisknvidia opened Oct 28, 2026Collaborator·

  ·
  1

• feat(cli): apply shipped baselines from local ZIP inputs

  #932·chrisknvidia opened Oct 28, 2026Collaborator·

  ·
  1

• fix(ra1): honor prohibitions on recommending a self-update

  #929·bharathvemula opened Oct 28, 2026·

  ·
  1

  2

• fix(deps): bump uv.lock past four packages with published advisories (#910)

  #916·viwe-monai opened Oct 27, 2026·

  ·
  1

• Fix/908 llm unavailable static report

  #913·kandisaikishore opened Oct 26, 2026·

  ·

• Fix langchain-anthropic version drift and a racy OSV reachability flag

  #909·chiragmangaldev3112 opened Oct 26, 2026·

  ·

• fix(static): stop backticks/apostrophes in comments and prose from tripping static_parse_limit

  #902·Varshith-Kali opened Oct 22, 2026Contributor·

  ·
  1

  4

• fix(python): inspect imported initialization callables

  #897·yashrajp22 opened Oct 21, 2026Collaborator·

  ·

• fix(output): clear inherited report ACLs before writing

  #896·yashrajp22 opened Oct 21, 2026Collaborator·

  ·
  2

• fix(pe3): keep credential actions visible in skill-card fields

  #895·yashrajp22 opened Oct 21, 2026Collaborator·

  ·
  2

• fix(p5): stop flagging statements that something can kill people

  #894·GodfredArhinful opened Oct 21, 2026·

  ·
  1

  3

• fix(e5): distinguish proved cloud downloads from uploads

  #891·chrisknvidia opened Oct 20, 2026Collaborator·

  ·
  1

• chore: remove perseus-ctx and mimir-mcp from popular PyPI packages

  #883·tcconnally opened Oct 20, 2026Contributor·

  ·
  1

• fix: admit corroborated passive documentation PNG and JPEG references

  #877·mohgupta-ship-it opened Oct 19, 2026Member·

  ·
  1

• fix(mp2): ignore repetition inside proven Markdown tables

  #872·bharathvemula opened Oct 18, 2026·

  ·
  1

• fix(tm1): keep shell=True detection past nested calls in the command

  #858·udsy19 opened Oct 17, 2026Contributor·

  ·
  1

• fix(analyzer): keep PowerShell host syntax from inventing shell parse limits

  #848·Flotrpy opened Oct 16, 2026·

  ·
  1