feat: multi-ecosystem support (12 GHSA ecosystems) + src/ refactor - #6

Merged

maxgfr merged 21 commits into

mainfrom

worktree-multi-ecosystem

Jul 21, 2026

Commits on Jul 21, 2026

refactor: split script.sh into src/ modules with build step
maxgfr
committed
d4c1cce
docs: document the src/ build workflow
maxgfr
committed
4651fc6
fix: parse scoped npm packages in purl feeds
maxgfr
committed
c287a41
feat: namespace vulnerability lookups by ecosystem
maxgfr
committed
2b04077
feat: ecosystem registry and detect-then-load source resolution
tester
committed
d81dcb6
feat: generate vulnerability feeds for all 12 GHSA ecosystems
tester
committed
3196ce6
feat: support Rust ecosystem (Cargo.lock)
tester
committed
1278748
feat: support Go ecosystem (go.sum, go.mod)
tester
committed
1108548
feat: support Python ecosystem (requirements.txt, poetry.lock, uv.lock, pdm.lock, Pipfile.lock)
tester
committed
9a41652
feat: support Ruby ecosystem (Gemfile.lock)
tester
committed
f53290e
feat: support PHP ecosystem (composer.lock)
tester
committed
53ce209
feat: support Maven ecosystem (gradle.lockfile, pom.xml)
tester
committed
f45d614
feat: support NuGet ecosystem (packages.lock.json)
tester
committed
977a7be
feat: support Dart ecosystem (pubspec.lock)
tester
committed
6b4b9b1
feat: support Hex ecosystem (mix.lock)
tester
committed
d8a076a
feat: support Swift ecosystem (Package.resolved)
tester
committed
1503e5e
feat: support GitHub Actions ecosystem (workflow uses scanning)
tester
committed
bd1b533
feat: per-ecosystem remediation, polyglot support, multi-language docs
tester
committed
b6c17d5
docs: list all ecosystem aliases in reusable-check lockfile-types input
tester
committed
a227070
chore: bump VERSION to 1.10.223 to align with main
tester
committed
bab8db8
Merge remote-tracking branch 'origin/main' into worktree-multi-ecosystem
tester
committed
f83a99c

Navigation Menu

feat: multi-ecosystem support (12 GHSA ecosystems) + src/ refactor - #6

feat: multi-ecosystem support (12 GHSA ecosystems) + src/ refactor#6
maxgfr merged 21 commits into
mainfrom
worktree-multi-ecosystem

Commits on Jul 21, 2026

refactor: split script.sh into src/ modules with build step

docs: document the src/ build workflow

fix: parse scoped npm packages in purl feeds

feat: namespace vulnerability lookups by ecosystem

feat: ecosystem registry and detect-then-load source resolution

feat: generate vulnerability feeds for all 12 GHSA ecosystems

feat: support Rust ecosystem (Cargo.lock)

feat: support Go ecosystem (go.sum, go.mod)

feat: support Python ecosystem (requirements.txt, poetry.lock, uv.lock, pdm.lock, Pipfile.lock)

feat: support Ruby ecosystem (Gemfile.lock)

feat: support PHP ecosystem (composer.lock)

feat: support Maven ecosystem (gradle.lockfile, pom.xml)

feat: support NuGet ecosystem (packages.lock.json)

feat: support Dart ecosystem (pubspec.lock)

feat: support Hex ecosystem (mix.lock)

feat: support Swift ecosystem (Package.resolved)

feat: support GitHub Actions ecosystem (workflow uses scanning)

feat: per-ecosystem remediation, polyglot support, multi-language docs

docs: list all ecosystem aliases in reusable-check lockfile-types input

chore: bump VERSION to 1.10.223 to align with main

Merge remote-tracking branch 'origin/main' into worktree-multi-ecosystem