{"_id":"@akshay7273/skill-advisories","_rev":"10-cf8385ab5023c4e581fe1de7cfab269c","name":"@akshay7273/skill-advisories","dist-tags":{"next":"0.6.0-rc.1","latest":"0.8.1"},"versions":{"0.1.0":{"name":"@akshay7273/skill-advisories","version":"0.1.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.1.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js"},"dist":{"shasum":"c97c2af4f9ec4be19883476f340a984c0f8187af","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.1.0.tgz","fileCount":24,"integrity":"sha512-/ykkFRwj1w7jmZrtnF1KFf5BmOOw6IfRmHAgf/zYDRRKci7xWbetBVSOop7jmntaYAas+e5kTKPppG+kO6t0SA==","signatures":[{"sig":"MEUCIDcHdeNW4RtLyy/rKf7CFfurHotXVTo32SWNhTuoB10MAiEAr2p/eJYgbtUhlTmgkytc9jI74d1WFCVSayEsvrSH0ZY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":45978},"main":"dist/lookup.js","type":"module","types":"./dist/lookup.d.ts","engines":{"node":">=20"},"gitHead":"c64f4560f66b57dace02bcd12ae33544a2b0f30d","scripts":{"test":"vitest run","build":"tsc","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"10.9.8","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"22.23.1","dependencies":{"ajv":"^8.17.1","picocolors":"^1.1.1","ajv-formats":"^3.0.1"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","typescript":"^5.7.0","@types/node":"^22.10.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.1.0_1784664152890_0.79615015614749","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"@akshay7273/skill-advisories","version":"0.2.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.2.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js"},"dist":{"shasum":"35bc0887627d12f1fbe982c04582b5e438e94f82","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.2.0.tgz","fileCount":33,"integrity":"sha512-SxUZ8mwyO9P/6OaMgIbSchrmAThi4k08HTddVQ7k4dPVU6NFsx1CQGU9uuilqx9kmanWshpy1TvBlNR4CiwGJQ==","signatures":[{"sig":"MEYCIQCm/RT+7buMBzOJufI86i6bUx3fhAypfxlf6PWQhzO1RQIhAPl7mJN0eDYjdVa+Y7JcGMwpZp5ujpvpCvr7F+ov3h16","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":71790},"main":"dist/lookup.js","type":"module","types":"./dist/lookup.d.ts","engines":{"node":">=20"},"gitHead":"a53a646aebda8ed7a50caef854daeb19949db214","scripts":{"test":"vitest run","build":"tsc","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"10.9.8","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"22.23.1","dependencies":{"ajv":"^8.17.1","picocolors":"^1.1.1","ajv-formats":"^3.0.1"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","typescript":"^5.7.0","@types/node":"^22.10.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.2.0_1784749163419_0.5676961321674503","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@akshay7273/skill-advisories","version":"0.3.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.3.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js"},"dist":{"shasum":"bf6ecf64e6e3b6da70d0c3a50a4797d699ee4858","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.3.0.tgz","fileCount":36,"integrity":"sha512-q7F6wBB/3TyKnp52XZwAHxjUHFNeqxyqbXqbi/pe4UEZB1dg9TxCP+rWE5T7JOappJY5pBd3fFBBS6RyBrvcJw==","signatures":[{"sig":"MEUCIQCxU0SIUdqkZ3f32qHNklLf6G4OA3xSJBBKvRsIGpmjEwIgY1OMvrAebpfBUEFeVG/P7vrPYHNE/iY2t+WVt+cYyCg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":112850},"main":"dist/lookup.js","type":"module","types":"./dist/lookup.d.ts","engines":{"node":">=20"},"scripts":{"test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test && npm run smoke"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"12.0.2","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.16.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","picocolors":"^1.1.1","ajv-formats":"^3.0.1"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.3.0_1785474376254_0.051125209880338085","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"@akshay7273/skill-advisories","version":"0.4.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.4.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js"},"dist":{"shasum":"a9f16e73c9f79e2746fa8c82a3248f6a77059b28","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.4.0.tgz","fileCount":53,"integrity":"sha512-SqTScajqTAKtbHJoNgiFbvqoLHaBtRbv0PhGMxV7vjl3MnCbrck6s0vAs7Z6t/011nBFvy75spWzENU6PiQRwg==","signatures":[{"sig":"MEUCIFpIeZJEbee7ltNNfa4zZ4Wfz/H8n5qMRIRp8NWOjL+GAiEAocEk2BmrYcGw6zc30pL3w+gFt8NOSsmcxTPSoF17yoA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":143156},"main":"dist/lookup.js","type":"module","types":"./dist/lookup.d.ts","engines":{"node":">=20"},"scripts":{"test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test && npm run smoke"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"12.0.2","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.16.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","picocolors":"^1.1.1","ajv-formats":"^3.0.1"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.4.0_1785474414032_0.6184949617766673","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"name":"@akshay7273/skill-advisories","version":"0.5.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.5.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"dist":{"shasum":"e48f4a679c1e67b995e2f2dc361e2ddeb89b65f7","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.5.0.tgz","fileCount":62,"integrity":"sha512-RgpwYfDvpu59k4AIgg9hFHb47AeLX/CZkqoNPDrz2WYKPFsoMCD29K5VWc/4YEuCtlkZz4mlwiaVxNikwr6bZQ==","signatures":[{"sig":"MEYCIQDXqZiM2FqhtNnbAeJut1qAbxWWc8/HLoKkoGiwgUkL9QIhAKrRO8zqvn3Ira+z8xDRgeDsnQKbiH1QOqxLNjVMUIv7","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":157471},"main":"dist/lookup.js","type":"module","types":"dist/lookup.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"}},"gitHead":"188863111ea66bcbe6a57a47867bef64bacdfda9","scripts":{"test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test && npm run smoke"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"12.0.2","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.16.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","zod":"^4.4.3","picocolors":"^1.1.1","ajv-formats":"^3.0.1","@modelcontextprotocol/server":"^2.0.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0","@modelcontextprotocol/client":"^2.0.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.5.0_1785474510690_0.29322217152768526","host":"s3://npm-registry-packages-npm-production"}},"0.5.1":{"name":"@akshay7273/skill-advisories","version":"0.5.1","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.5.1","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"dist":{"shasum":"7df99604d918317c12e6b5acb7dc54b69cbecf5a","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.5.1.tgz","fileCount":62,"integrity":"sha512-Ji709vKPAYHiLrFeuBWVqxn+ynbDs793YkfDIyK1gIAKLY0SxgesNl6CdiI6O4qnVgofbwBXfBez/n0O0222Gg==","signatures":[{"sig":"MEUCIQCFDVSUtn8Ft8bXAXWOU5tGv1PtyRMmnASuufrhvHPjBAIgff0IBtonSKQd/v5gt4CRr7QNz+DLhn8LjSVg50rNBN8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":157565},"main":"dist/lookup.js","type":"module","types":"dist/lookup.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"}},"gitHead":"3ad8398f1523a797652c9f1c1adf3e92be1c84a0","scripts":{"test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","prepublishOnly":"npm run build && npm test && npm run smoke"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"12.0.2","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.16.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","zod":"^4.4.3","picocolors":"^1.1.1","ajv-formats":"^3.0.1","@modelcontextprotocol/server":"^2.0.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0","@modelcontextprotocol/client":"^2.0.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.5.1_1785474687958_0.5469284744265641","host":"s3://npm-registry-packages-npm-production"}},"0.6.0-rc.1":{"name":"@akshay7273/skill-advisories","version":"0.6.0-rc.1","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.6.0-rc.1","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"dist":{"shasum":"a436b5feca96f438fdbab621e534e5b23246b271","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.6.0-rc.1.tgz","fileCount":89,"integrity":"sha512-OetUbveUHx4kyuOta4MkeaTZ8aS+5WYI34r4fDw/17WCXxsOr+dQMWrxR6mLC0WPAQ4Rhiqq6IU7K6z6MHkZAw==","signatures":[{"sig":"MEUCIQDYElrApBp35P5Og7h2mkyEtaJI9Ist4JwmZspO7fuuSwIgP/xYpanTae6wUNR6wwp+gBfZLNUKrRh3/jGcdgc9J9E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@akshay7273%2fskill-advisories@0.6.0-rc.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":222402},"main":"dist/lookup.js","type":"module","_from":"file:akshay7273-skill-advisories-0.6.0-rc.1.tgz","types":"dist/lookup.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./delta":{"types":"./dist/delta.d.ts","import":"./dist/delta.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"}},"scripts":{"site":"node scripts/build-site.mjs","test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","benchmark":"npm run build && node scripts/benchmark.mjs","ops:check":"node scripts/check-runbooks.mjs","benchmark:ci":"npm run build && node scripts/benchmark.mjs --identities 100000 --artifacts 250 --max-lookup-ms 5000 --max-scan-ms 30000 --max-false-positive-ms 15000","health:check":"npm run site && node scripts/check-health.mjs","prepublishOnly":"npm run build && npm test && npm run smoke","integrations:check":"npm run build && node scripts/check-integrations.mjs"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"_resolved":"/home/runner/work/skill-advisories/skill-advisories/akshay7273-skill-advisories-0.6.0-rc.1.tgz","_integrity":"sha512-OetUbveUHx4kyuOta4MkeaTZ8aS+5WYI34r4fDw/17WCXxsOr+dQMWrxR6mLC0WPAQ4Rhiqq6IU7K6z6MHkZAw==","repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"11.16.0","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.18.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","zod":"^4.4.3","picocolors":"^1.1.1","ajv-formats":"^3.0.1","@modelcontextprotocol/server":"^2.0.0"},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0","@modelcontextprotocol/client":"^2.0.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.6.0-rc.1_1785517624302_0.6291804800276684","host":"s3://npm-registry-packages-npm-production"}},"0.7.0":{"name":"@akshay7273/skill-advisories","version":"0.7.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.7.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"dist":{"shasum":"6ee721291c5ab0f7ff71229ba05862a792df7c27","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.7.0.tgz","fileCount":100,"integrity":"sha512-Iuk6fH+WNPe4MRnXfrchkC7f6lfykq9SJlLUrFh7vvQqo7vwJ8U2yWXgT4OiM5lei5htSd4EQCJVVyU0wgSsSw==","signatures":[{"sig":"MEUCICDe7Op2vTC3WPokH7EwBpo53WUSVKCYrWssfRwOp37rAiEAt8b1j9P6FwBqTgyKW38eViO8rPqBvkld2FCk9E+kmp0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@akshay7273%2fskill-advisories@0.7.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":470653},"main":"dist/lookup.js","type":"module","_from":"file:akshay7273-skill-advisories-0.7.0.tgz","types":"dist/lookup.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./delta":{"types":"./dist/delta.d.ts","import":"./dist/delta.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"}},"scripts":{"site":"node scripts/build-site.mjs","test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","benchmark":"npm run build && node scripts/benchmark.mjs","ops:check":"node scripts/check-runbooks.mjs","benchmark:ci":"npm run build && node scripts/benchmark.mjs --identities 100000 --artifacts 250 --max-lookup-ms 5000 --max-scan-ms 30000 --max-false-positive-ms 15000","health:check":"npm run site && node scripts/check-health.mjs","prepublishOnly":"npm run build && npm test && npm run smoke","references:check":"npm run build && node scripts/check-references.mjs","integrations:check":"npm run build && node scripts/check-integrations.mjs"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"_resolved":"/home/runner/work/skill-advisories/skill-advisories/akshay7273-skill-advisories-0.7.0.tgz","_integrity":"sha512-Iuk6fH+WNPe4MRnXfrchkC7f6lfykq9SJlLUrFh7vvQqo7vwJ8U2yWXgT4OiM5lei5htSd4EQCJVVyU0wgSsSw==","repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"11.16.0","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.18.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","zod":"^4.4.3","picocolors":"^1.1.1","ajv-formats":"^3.0.1","@modelcontextprotocol/server":"^2.0.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0","@modelcontextprotocol/client":"^2.0.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.7.0_1785546313938_0.6076083559004599","host":"s3://npm-registry-packages-npm-production"}},"0.8.0":{"name":"@akshay7273/skill-advisories","version":"0.8.0","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"license":"MIT","_id":"@akshay7273/skill-advisories@0.8.0","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"homepage":"https://github.com/Akshay7273/skill-advisories#readme","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"dist":{"shasum":"33769b250ae0d6c03d5daff801b70e2efc6b34af","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.8.0.tgz","fileCount":108,"integrity":"sha512-O9VzB1mnuVNO4FgGz3c9683xkTeiFCnIe0GP5UgkwjGLm5dGfOHLXMAdCG6vBY4olHCRrP84HQ010L+RXp9QUg==","signatures":[{"sig":"MEQCIEBCUCgZ0W1HDwQ81fQ64Jx20ZToYJjrylFsEYIZWE9EAiBlRngp+oxW0ZWC735FDO6pxIh1amPUHw8+T8OGkGy0Jw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@akshay7273%2fskill-advisories@0.8.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":555046},"main":"dist/lookup.js","type":"module","_from":"file:akshay7273-skill-advisories-0.8.0.tgz","types":"dist/lookup.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./delta":{"types":"./dist/delta.d.ts","import":"./dist/delta.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"}},"scripts":{"site":"node scripts/build-site.mjs","test":"vitest run","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","compile":"tsx src/compile-cli.ts","validate":"tsx src/validate-cli.ts","benchmark":"npm run build && node scripts/benchmark.mjs","ops:check":"node scripts/check-runbooks.mjs","lock:check":"npm run build && node dist/cli.js lock --check integrations --lockfile integrations/skill-advisories.lock.json --strict","benchmark:ci":"npm run build && node scripts/benchmark.mjs --identities 100000 --artifacts 250 --max-lookup-ms 5000 --max-scan-ms 30000 --max-false-positive-ms 15000","health:check":"npm run site && node scripts/check-health.mjs","prepublishOnly":"npm run build && npm test && npm run smoke","rollback:check":"npm run build && node dist/cli.js rollback feed --history feed/history.json","references:check":"npm run build && node scripts/check-references.mjs","integrations:check":"npm run build && node scripts/check-integrations.mjs"},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"_resolved":"/home/runner/work/skill-advisories/skill-advisories/akshay7273-skill-advisories-0.8.0.tgz","_integrity":"sha512-O9VzB1mnuVNO4FgGz3c9683xkTeiFCnIe0GP5UgkwjGLm5dGfOHLXMAdCG6vBY4olHCRrP84HQ010L+RXp9QUg==","repository":{"url":"git+https://github.com/Akshay7273/skill-advisories.git","type":"git"},"_npmVersion":"11.16.0","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","directories":{},"_nodeVersion":"24.18.0","allowScripts":{"esbuild@0.28.1":true},"dependencies":{"ajv":"^8.17.1","zod":"^4.4.3","picocolors":"^1.1.1","ajv-formats":"^3.0.1","@modelcontextprotocol/server":"^2.0.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","vitest":"^3.0.0","esbuild":"^0.28.1","typescript":"^5.7.0","@types/node":"^22.10.0","@modelcontextprotocol/client":"^2.0.0"},"_npmOperationalInternal":{"tmp":"tmp/skill-advisories_0.8.0_1785554237506_0.5634769827473345","host":"s3://npm-registry-packages-npm-production"}},"0.8.1":{"name":"@akshay7273/skill-advisories","version":"0.8.1","description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","type":"module","license":"MIT","engines":{"node":">=20"},"bin":{"skill-advisories":"dist/cli.js","skill-advisories-mcp":"dist/mcp-cli.js"},"main":"dist/lookup.js","types":"dist/lookup.d.ts","exports":{".":{"types":"./dist/lookup.d.ts","import":"./dist/lookup.js"},"./intelligence":{"types":"./dist/intelligence.d.ts","import":"./dist/intelligence.js"},"./mcp":{"types":"./dist/mcp.d.ts","import":"./dist/mcp.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./delta":{"types":"./dist/delta.d.ts","import":"./dist/delta.js"}},"scripts":{"validate":"tsx src/validate-cli.ts","compile":"tsx src/compile-cli.ts","site":"node scripts/build-site.mjs","health:check":"npm run site && node scripts/check-health.mjs","ops:check":"node scripts/check-runbooks.mjs","references:check":"npm run build && node scripts/check-references.mjs","integrations:check":"npm run build && node scripts/check-integrations.mjs","adopters:check":"npm run build && node scripts/check-adopters.mjs","metrics:collect":"npm run build && node scripts/collect-metrics.mjs","metrics:check":"npm run build && node scripts/collect-metrics.mjs --check","lock:check":"npm run build && node dist/cli.js lock --check integrations --lockfile integrations/skill-advisories.lock.json --strict","rollback:check":"npm run build && node dist/cli.js rollback feed --history feed/history.json","build":"tsc && esbuild src/cli.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/action.js","smoke":"node scripts/smoke-cli.mjs","benchmark":"npm run build && node scripts/benchmark.mjs","benchmark:ci":"npm run build && node scripts/benchmark.mjs --identities 100000 --artifacts 250 --max-lookup-ms 5000 --max-scan-ms 30000 --max-false-positive-ms 15000","test":"vitest run","prepublishOnly":"npm run build && npm test && npm run smoke"},"repository":{"type":"git","url":"git+https://github.com/Akshay7273/skill-advisories.git"},"keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"dependencies":{"@modelcontextprotocol/server":"^2.0.0","ajv":"^8.17.1","ajv-formats":"^3.0.1","picocolors":"^1.1.1","zod":"^4.4.3"},"devDependencies":{"@modelcontextprotocol/client":"^2.0.0","@types/node":"^26.1.2","esbuild":"^0.28.1","tsx":"^4.19.0","typescript":"^7.0.2","vitest":"^4.1.10"},"allowScripts":{"esbuild@0.28.1":true},"_id":"@akshay7273/skill-advisories@0.8.1","bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"homepage":"https://github.com/Akshay7273/skill-advisories#readme","_integrity":"sha512-0xPbGCC0pmLqMJx0zMchWldpT+Zv/QK7XJbq4FmaeRq8sahD4zVGPivY8XjmHa/OzT56Ayts987Lbb6hoBy7hg==","_resolved":"/home/runner/work/skill-advisories/skill-advisories/akshay7273-skill-advisories-0.8.1.tgz","_from":"file:akshay7273-skill-advisories-0.8.1.tgz","_nodeVersion":"24.18.0","_npmVersion":"11.16.0","dist":{"integrity":"sha512-0xPbGCC0pmLqMJx0zMchWldpT+Zv/QK7XJbq4FmaeRq8sahD4zVGPivY8XjmHa/OzT56Ayts987Lbb6hoBy7hg==","shasum":"0b77bafb9b05391129e00f390b82e40e9392c295","tarball":"https://registry.npmjs.org/@akshay7273/skill-advisories/-/skill-advisories-0.8.1.tgz","fileCount":114,"unpackedSize":584604,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@akshay7273%2fskill-advisories@0.8.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDKr7C8KLTnOE0lbX9yGzrwihLCA1DPrFAZdT2Lac5iawIgM8eJzKOZQRNm0eURyK5M7/AkxKXTAKuMjp9HvkxM9x0="}]},"_npmUser":{"name":"akshay7273","email":"akshaykumar7273@gmail.com"},"directories":{},"maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/skill-advisories_0.8.1_1785634667820_0.29159132961037937"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-21T20:02:32.713Z","modified":"2026-08-02T01:37:48.314Z","0.1.0":"2026-07-21T20:02:33.088Z","0.2.0":"2026-07-22T19:39:23.587Z","0.3.0":"2026-07-31T05:06:16.394Z","0.4.0":"2026-07-31T05:06:54.237Z","0.5.0":"2026-07-31T05:08:30.828Z","0.5.1":"2026-07-31T05:11:28.111Z","0.6.0-rc.1":"2026-07-31T17:07:04.486Z","0.7.0":"2026-08-01T01:05:14.092Z","0.8.0":"2026-08-01T03:17:17.682Z","0.8.1":"2026-08-02T01:37:47.976Z"},"bugs":{"url":"https://github.com/Akshay7273/skill-advisories/issues"},"license":"MIT","homepage":"https://github.com/Akshay7273/skill-advisories#readme","keywords":["security","advisories","ai-agents","claude","agent-skills","mcp","supply-chain","threat-intelligence"],"repository":{"type":"git","url":"git+https://github.com/Akshay7273/skill-advisories.git"},"description":"Open advisory database for AI agent skills, plugins, and MCP servers — machine-readable threat data for the agent ecosystem.","maintainers":[{"name":"akshay7273","email":"akshaykumar7273@gmail.com"}],"readme":"# skill-advisories\n\n[![CI](https://github.com/Akshay7273/skill-advisories/actions/workflows/ci.yml/badge.svg)](https://github.com/Akshay7273/skill-advisories/actions/workflows/ci.yml)\n[![npm](https://img.shields.io/npm/v/%40akshay7273%2Fskill-advisories)](https://www.npmjs.com/package/@akshay7273/skill-advisories)\n[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/Akshay7273/skill-advisories/badge)](https://scorecard.dev/viewer/?uri=github.com/Akshay7273/skill-advisories)\n[![advisories](https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fraw.githubusercontent.com%2FAkshay7273%2Fskill-advisories%2Fmain%2Ffeed%2Ffeed.json&query=%24.advisory_count&label=advisories&color=red)](https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json)\n\nOpen advisory database for AI agent skills, plugins, and MCP servers — OSV-style, machine-readable threat data for the agent ecosystem.\n\n**Browse advisories:** https://akshay7273.github.io/skill-advisories/\n\n**Feed health:** https://akshay7273.github.io/skill-advisories/health.html\n\nEvery advisory documents a malicious, vulnerable, or typosquatted agent skill, backed by at least one published public reference (vendor report, researcher writeup, or registry takedown).\n\n## Roadmap\n\nThe project is moving toward precise version-aware detection, verifiable threat\nfeeds, OSV interoperability, and agent-native pre-install checks through MCP.\nSee the [public roadmap](ROADMAP.md) for milestones and acceptance criteria.\n\n## The feed (public API)\n\nConsume the database directly — no install needed:\n\n- Full feed: `https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json`\n- Feed SHA-256 digest: `https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json.sha256`\n- Fast lookup index (`ecosystem:name` → advisory ids): `https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/index.json`\n- Compact feed: `https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/compact.json`\n- Cursor-verified incremental update: `https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/delta.json`\n- Advisory schema: [`schema/advisory.schema.json`](schema/advisory.schema.json)\n- OSV-compatible index: [`feed/osv/index.json`](feed/osv/index.json)\n- Multi-file checksum manifest: [`feed/checksums.txt`](feed/checksums.txt)\n- Append-only publication history: [`feed/history.json`](feed/history.json)\n\nSee the [OSV export and verification guide](docs/osv-export.md) for field mapping and integrity checks.\nIncremental consumers should follow the [compact feed and delta protocol](docs/feed-updates.md).\nReferences may carry archival [evidence provenance](docs/evidence-provenance.md), and\nevery cited page is probed weekly for [link rot](docs/evidence-provenance.md#detecting-rot).\nA downloaded copy can be checked against its own evidence with\n[`skill-advisories verify`](docs/feed-freshness.md#verification).\n\n## Try it in 30 seconds\n\n```bash\nnpx @akshay7273/skill-advisories check better-polymarket\n```\n\n```\n❌ 1 advisory match(es) across 1 skill(s) checked:\n  better-polymarket [clawhub] → SKA-2026-0002 [critical] better-polymarket and polymarket-all-in-one hide a reverse-shell backdoor inside operational market-search code rather than install hooks.\n      https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting\n      https://www.antiy.net/p/clawhavoc-analysis-of-large-scale-poisoning-campaign-targeting-the-openclaw-skill-market-for-ai-agents/\n```\n\nThat is a real advisory with real sources, and the command exits 1 so CI stops.\nA name with nothing against it prints a single line and exits 0. Nothing is\nuploaded: the feed is downloaded and matched locally.\n\nTo check what is already installed rather than a name you type, run\n`npx @akshay7273/skill-advisories scan`.\n\nConsidering using this on a real project? [docs/pilot.md](docs/pilot.md)\ndescribes what a pilot involves and what is asked afterwards.\n\n## CLI\n\n```bash\n# Check specific skill names\nnpx @akshay7273/skill-advisories check omnicogg my-other-skill\n\n# Avoid cross-ecosystem name collisions\nnpx @akshay7273/skill-advisories check --ecosystem mcp-server my-server\n\n# Evaluate a specific installed version when an advisory lists affected versions\nnpx @akshay7273/skill-advisories check --ecosystem npm --version 1.2.3 my-package\n\n# Check file hashes directly (catches renamed malware)\nnpx @akshay7273/skill-advisories check --sha256 <64-hex-digest>\n\n# Turn typosquat proximity warnings into failures\nnpx @akshay7273/skill-advisories check omnicog --strict\n\n# Scan installed skill directories (~/.claude/skills, ~/.openclaw/skills, ...)\nnpx @akshay7273/skill-advisories scan\n\n# Scan with SARIF output for GitHub Code Scanning\nnpx @akshay7273/skill-advisories scan ./skills --format sarif\n\n# Offline mode using cached feed (1h TTL default)\nnpx @akshay7273/skill-advisories scan --offline\n\n# Set minimum failure threshold (low, medium, high, critical)\nnpx @akshay7273/skill-advisories scan ./skills --fail-on high\n\n# Refuse to act on a feed older than 12 hours\nnpx @akshay7273/skill-advisories scan --max-feed-age 12 --strict\n\n# Check a downloaded feed directory against its own evidence\nnpx @akshay7273/skill-advisories verify ./feed\n\n# Record the artifacts installed here as the approved set\nnpx @akshay7273/skill-advisories lock ./skills\n\n# Fail CI when what is installed is not what was approved\nnpx @akshay7273/skill-advisories lock --check ./skills --strict\n\n# Report the newest feed copy the published history proves good\nnpx @akshay7273/skill-advisories rollback ./mirror-a ./mirror-b\n```\n\nCommon options: `--format <human|json|sarif>`, `--fail-on <severity>`,\n`--ecosystem <id>`, `--version <value>`, `--sha256`, `--strict`,\n`--offline`, `--refresh`, `--max-feed-age <hours>`, and\n`--feed <url-or-path>`.\n\nFilesystem scans also support bounded execution with `--concurrency`,\n`--hash-concurrency`, `--max-file-bytes`, `--max-files`,\n`--max-total-bytes`, and repeatable `--exclude-dir` options. An incomplete scan\nfails closed with exit code 2; `--allow-incomplete` explicitly permits a partial\nresult. See the [JSON result contract](docs/result-schema.md) for scan telemetry.\n\nExit codes: `0` no advisories matched · `1` findings met policy · `2` usage,\nfeed, incomplete-scan, or stale-feed-under-`--strict` error. The `verify`\nsubcommand reports on a directory instead of on artifacts and uses its own\ncodes, described in\n[feed freshness and verification](docs/feed-freshness.md).\n\n`lock` answers the question a feed cannot: not *is this known bad*, but *is\nthis the artifact that was reviewed*. It records approved artifact digests in a\ncommitted lockfile and compares installed artifacts against them without\nconsulting the feed at all. See\n[approved artifact identities](docs/lockfile.md).\n\n`rollback` answers the question `verify` cannot. A feed directory assembled by\nan attacker matches its own evidence perfectly, so during an incident the useful\nquestion is which of the copies you hold the *published history* proves good.\nIt examines every candidate against a history supplied separately, reports the\nnewest one the evidence justifies, and writes nothing. See\n[verified recovery points](docs/rollback-verification.md).\n\nAutomation consumers can rely on the [versioned JSON result contract](docs/result-schema.md).\n\n## MCP and Claude Code\n\nRun the read-only MCP server so agents can check an artifact before installing\nit:\n\n```bash\nclaude mcp add --transport stdio --scope user skill-advisories -- \\\n  npx -y -p @akshay7273/skill-advisories skill-advisories-mcp\n```\n\nThe server provides `check_artifact`, `get_advisory`, and\n`search_advisories`. A repository can add `--policy examples/policy.json` to\nenforce severity thresholds, denied ecosystems, immutable hashes, and warning\nhandling. See the [MCP, policy, and Claude Code integration guide](docs/mcp.md).\nOpenClaw, VS Code, and GitHub Action examples are covered by the\n[integration contract](docs/integrations.md).\n\n## GitHub Action\n\nFail your CI when a skill you ship or install matches a published advisory:\n\n```yaml\n- uses: Akshay7273/skill-advisories@v1\n  with:\n    names: my-skill-name\n```\n\nOr scan a directory of skills:\n\n```yaml\n- uses: Akshay7273/skill-advisories@v1\n  with:\n    scan-dir: ./skills\n```\n\nUpload SARIF results to GitHub Code Scanning:\n\n```yaml\n- uses: Akshay7273/skill-advisories@v1\n  with:\n    scan-dir: .claude/skills\n    sarif-file: skill-advisories.sarif\n    fail-on: high\n- uses: github/codeql-action/upload-sarif@v3\n  if: always()\n  with:\n    sarif_file: skill-advisories.sarif\n```\n\nInputs: `names` (space-separated skill names), `scan-dir` (directory to scan), `ecosystem` (restrict name checks), `version` (installed version for name checks), `feed` (alternate feed URL or path), `format` (output format), `sarif-file` (SARIF output path), `fail-on` (minimum severity threshold).\n\n`@v1` is a moving pointer to the newest stable release, and it names the input\ncontract above rather than the package version -- the inputs have been stable\nsince v1 while the package is still 0.x. Pin a specific release such as\n`@v0.8.0` if you would rather adopt changes deliberately, or a commit SHA if\nyou want upgrades to be something you approve rather than receive; prereleases\nnever move the pointer.\n\n## Data integrity\n\n1. Every advisory cites at least one published public reference.\n2. No hearsay: submissions without a published report or reproducible evidence are not listed.\n3. Advisories can be withdrawn; disputes are handled via GitHub issues.\n\n## Accuracy & performance\n\nPerformance results are generated from a deterministic synthetic corpus and\nrecord the exact commit and environment. On the checked-in Windows/Node 24\nbaseline, 100,000 name lookups completed in 125 ms, a 100,000-name synthetic\nfalse-positive sweep produced zero warnings in 479 ms, and 10,000 one-file\nartifacts were scanned in 10.36 seconds with 214 MB peak RSS. This is a reproducible\nbaseline, not a guarantee for other hardware or real-world artifact layouts.\n\nSee the [benchmark method and results](benchmarks/README.md). Accuracy claims\nrequire a redistributable corpus or a documented generator; downloads and\nunpublished third-party collections are not used as evidence.\n\n## License\n\nCode: MIT. Advisory data: CC-BY-4.0 — free to use with attribution.\n","readmeFilename":"README.md"}