Extension-API gate

Workflow runs for Extension-API gate

• chore(release): 0.1.9

  completed successfully:
  Extension-API gate#42:Pull request#92openedbyRinkia
  release/0.1.9

  Sep 8, 202612s
  More actions for workflow run 42

• docs(bench): record why SQLAlchemy's 1.00 band is at its static ceiling

  completed successfully:
  Extension-API gate#41:Pull request#91openedbyRinkia
  docs/sqlalchemy-band-ceiling

  Sep 8, 202613s
  More actions for workflow run 41

• feat(security): cross-check the Java lens against Semgrep, and fix the gap it found

  completed successfully:
  Extension-API gate#40:Pull request#90openedbyRinkia
  feat/security-lens-java-crosscheck

  Sep 8, 202612s
  More actions for workflow run 40

• chore(release): 0.1.8

  completed successfully:
  Extension-API gate#39:Pull request#89openedbyRinkia
  release/0.1.8

  Sep 8, 202613s
  More actions for workflow run 39

• feat(security): add a Java risk-sink catalog

  completed successfully:
  Extension-API gate#38:Pull request#88openedbyRinkia
  feat/security-lens-java-sinks

  Jul 24, 202619s
  More actions for workflow run 38

• bench: add a second, non-circular authority for the moddability labels

  completed successfully:
  Extension-API gate#37:Pull request#87openedbyRinkia
  bench/usage-crosscheck

  Jul 24, 202613s
  More actions for workflow run 37

• bench: add flask, the first target that can falsify a ranking change

  completed successfully:
  Extension-API gate#36:Pull request#86openedbyRinkia
  bench/flask-target

  Jul 24, 202614s
  More actions for workflow run 36

• feat(detect): disclose score ties instead of presenting them as a ranking

  completed successfully:
  Extension-API gate#35:Pull request#85openedbyRinkia
  feat/detect-tie-disclosure

  Jul 24, 202615s
  More actions for workflow run 35

• fix(parser): collapse @overload stubs into one seam

  completed successfully:
  Extension-API gate#34:Pull request#84openedbyRinkia
  fix/overload-stub-duplicates

  Jul 24, 202619s
  More actions for workflow run 34

• bench: report recall@10 with tie bounds

  completed successfully:
  Extension-API gate#33:Pull request#83openedbyRinkia
  bench/tie-aware-recall

  Jul 24, 202617s
  More actions for workflow run 33

• bench: add function labels, and say plainly why the aggregate jumped

  completed successfully:
  Extension-API gate#32:Pull request#82openedbyRinkia
  bench/function-labels

  Jul 24, 202615s
  More actions for workflow run 32

• docs: refresh the README for three languages, and record the benchmark's blind spot

  completed successfully:
  Extension-API gate#31:Pull request#81openedbyRinkia
  docs/refresh-languages-and-blindspot

  Jul 24, 202620s
  More actions for workflow run 31

• feat(cli): add --version to modscan and modscan-audit

  completed successfully:
  Extension-API gate#30:Pull request#80openedbyRinkia
  feat/cli-version

  Jul 24, 202614s
  More actions for workflow run 30

• chore: release 0.1.7

  completed successfully:
  Extension-API gate#29:Pull request#79openedbyRinkia
  release/0.1.7

  Jul 23, 202614s
  More actions for workflow run 29

• bench: add junit-jupiter-api, the first Java target, and record its baseline

  completed successfully:
  Extension-API gate#28:Pull request#78openedbyRinkia
  bench/java-target

  Jul 23, 202622s
  More actions for workflow run 28

• feat(java): Java language front-end (tree-sitter)

  completed successfully:
  Extension-API gate#27:Pull request#77openedbyRinkia
  feat/java-frontend

  Jul 23, 202617s
  More actions for workflow run 27

• fix(typescript): do not scan .d.ts declaration files

  completed successfully:
  Extension-API gate#26:Pull request#76openedbyRinkia
  fix/skip-declaration-files

  Jul 23, 202624s
  More actions for workflow run 26

• feat(mcp): expose the security lens as an audit_attack_surface tool

  completed successfully:
  Extension-API gate#25:Pull request#75openedbyRinkia
  feat/mcp-audit-tool

  Jul 23, 202623s
  More actions for workflow run 25

• bench: add commander, the first JavaScript target, and record its baseline

  completed successfully:
  Extension-API gate#24:Pull request#74openedbyRinkia
  bench/typescript-target

  Jul 23, 202623s
  More actions for workflow run 24

• fix(typescript): recognise CommonJS exports, and widen the labels gate

  completed successfully:
  Extension-API gate#23:Pull request#73openedbyRinkia
  fix/ts-commonjs-exports

  Jul 23, 202617s
  More actions for workflow run 23

• test(security): cross-check the TS lens against eslint-plugin-security

  completed successfully:
  Extension-API gate#22:Pull request#72openedbyRinkia
  feat/ts-crosscheck

  Jul 23, 202620s
  More actions for workflow run 22

• feat(security): TypeScript/JavaScript sinks for the security lens (M4)

  completed successfully:
  Extension-API gate#21:Pull request#71openedbyRinkia
  feat/security-ts-sinks

  Jul 23, 202618s
  More actions for workflow run 21

• test(security): commit the Bandit cross-check harness

  completed successfully:
  Extension-API gate#20:Pull request#70openedbyRinkia
  feat/security-crosscheck

  Jul 23, 202614s
  More actions for workflow run 20

• feat(security): close the process-sink gaps Bandit cross-check found

  completed successfully:
  Extension-API gate#19:Pull request#69openedbyRinkia
  feat/security-process-sinks

  Jul 23, 202618s
  More actions for workflow run 19

• chore: release 0.1.6

  completed successfully:
  Extension-API gate#18:Pull request#68openedbyRinkia
  release/0.1.6

  Jul 23, 202619s
  More actions for workflow run 18