feat: ship Installory 1.4 audit campaign - #2

Merged

willytop8 merged 60 commits into

mainfrom

campaign/2026-07-audit

Jul 16, 2026

Commits on Jul 15, 2026

test(core): cover shipped migration upgrades (INF-08)
willytop8
committed
3e3edf0
fix(app): balance panel security scopes (SEC25-002)
willytop8
committed
b0d5d1e
ci: build app and guard product invariants
willytop8
committed
ae0b220
fix(tooling): protect production description corpus
willytop8
committed
125aa87
chore(data): refresh offline descriptions (INF-09)
willytop8
committed
c438186
fix(core): make manager scans bounded and truthful
willytop8
committed
580a0d7
fix(tooling): broaden npm description discovery (INF-09)
willytop8
committed
1669881
fix(core): generate exact injection-safe scripts
willytop8
committed
f0e2ec5
fix(core): scope dependency and duplicate identity
willytop8
committed
5d65ed6
fix(core): neutralize spreadsheet export formulas (SEC25-010)
willytop8
committed
72a57ac
fix(core): make snapshot history exact and lazy
willytop8
committed
fa43a3c
fix(core): enforce ancestor-only grant matching (SEC25-007)
willytop8
committed
c6b44ae
fix(core): bound and redact provenance evidence
willytop8
committed
f39a351
fix(core): bound Python metadata parsing
willytop8
committed
38874b2
fix(app): harden persisted state and scan lifecycle
willytop8
committed
065d8f8
fix(app): make analysis controls truthful and accessible
willytop8
committed
cbdc50d
fix(app): authorize user-selected exports (SEC25-001)
willytop8
committed
c81bacb
chore(data): expand npm description coverage (INF-09)
willytop8
committed
b251912

Commits on Jul 16, 2026

feat(app): search every package analysis (APP-F1)
willytop8
committed
ccba530
feat(app): bulk cleanup analysis views (APP-F2)
willytop8
committed
7463879
feat(app): export inventory as JSON (APP-F5)
willytop8
committed
311de9c
fix(core): bound dist-info metadata reads (PERF25-011)
willytop8
committed
15a54e8
feat(core): scan persistent uv tools (APP-F6)
willytop8
committed
67abf94
feat(app): add sortable inventory table (APP-F3)
willytop8
committed
d2db275
feat(core): aggregate measured package payload (APP-F4)
willytop8
committed
4fea1fe
feat(app): visualize measured package payload (APP-F4)
willytop8
committed
11f431e
docs: close the 2026-07 audit campaign
willytop8
committed
3d31315
chore(release): set version 1.4.0 build 10
willytop8
committed
b374c29
fix(compliance): bundle release declarations and notices
willytop8
committed
e74d6af
fix(app): include uv in onboarding coverage
willytop8
committed
00b62e4
ci: execute app regression tests
willytop8
committed
95e8ce8
fix(app): prevent selected table rows from crashing
willytop8
committed
55254b0
docs(release): record 1.4.0 App Store QA
willytop8
committed
2510881
docs(descriptions): clarify corpus refresh workflow
willytop8
committed
a35f5ad
docs: consolidate project documentation
willytop8
committed
2251383
fix(ci): make invariant checks portable
willytop8
committed
6486974
fix(ci): validate generated project ignore rule
willytop8
committed
4b3d8fc
test(core): await snapshot database read
willytop8
committed
cbca32c
chore(ci): update checkout action to v7
willytop8
committed
c001e0d
fix(ci): serialize Swift Testing suites
willytop8
committed
7d5be72
fix(ci): pin Xcode 26 toolchain
willytop8
committed
e916aa5
test(core): isolate async size measurements
willytop8
committed
a2eb9f1
test(app): render package table offscreen
willytop8
committed
a3bcc39
fix(ci): use runner-compatible Xcode
willytop8
committed
eb33fcb
fix(ci): run core tests on Intel macOS
willytop8
committed
75ee2e8
fix(core): skip initial size-walk suspension
willytop8
committed
0aa95a0
chore(release): bump build to 11
willytop8
committed
7bc4285
ci: capture core crash diagnostics
willytop8
committed
1d22208
revert(core): restore archived size-walk scheduling
willytop8
committed
e78a425
fix(ci): run core tests through Xcode
willytop8
committed
4855643
chore(release): restore submitted build 10
willytop8
committed
9151739
fix(ci): run package tests on ARM macOS
willytop8
committed
2f5ac81
test(core): run size suite under XCTest
willytop8
committed
3febeb2
fix(ci): restore SwiftPM core test runner
willytop8
committed
6743973
ci: capture hosted core crash backtrace
willytop8
committed
1baef0d
fix(ci): isolate core test frameworks
willytop8
committed
ead3291
test(core): trace hosted size crash
willytop8
committed
4fdc62e
test(core): trace in-memory provider crash
willytop8
committed
f8fce3a
fix(tests): build fixture ancestors iteratively
willytop8
committed
804940d
test(core): isolate pipx environment
willytop8
committed
764ee7c