Changelog

Scan intake

Authenticated repository-URL scan intake is live now; scans queue as durable jobs.

Dependency lineage mapping (npm, PyPI)

Per-scan dependency resolution across npm and PyPI with OSV.dev vulnerability matching is live now for repository scans.

Policy engine (log & warn actions)

Define provenance rules for review today; automated log and warn actions are rolling out behind the queued analysis workflow.

Archive scan intake

Archive scanning is planned; archive analysis is not available yet.

AI-origin detection

AI-origin scoring, stylometric evidence, and explainable confidence reports are planned for a future analysis-worker phase.

Dependency lineage expansion (Maven & additional ecosystems)

Transitive lineage graphs and additional ecosystems beyond npm/PyPI are planned for a future analysis-worker phase.

Policy engine (block & require-review actions)

Automated block and require-review enforcement is planned for the worker-backed policy phase.

SOC 2 compliance reports

Audit-ready compliance reports are planned for a future reporting phase.

EU AI Act & GDPR compliance reports

EU AI Act and GDPR reporting is planned for a future compliance-reporting phase.

SBOM generation & validation

SBOM generation and validation is planned for a future analysis-worker phase.

SLSA Level 3 provenance attestation

SLSA Level 3 provenance attestation is planned for a future phase.

SSO / SAML (Okta, Azure AD, Google)

SSO/SAML is planned for a future enterprise phase.

HIPAA compliance reports

HIPAA compliance reporting is planned for a future phase.

Slack & webhook integrations

Slack and webhook integrations are planned for a future phase.

Real-time monitoring & drift detection

Webhook-driven ingestion, drift detection, and alerting are planned for a future phase.

Enterprise deployment (SCIM, log streaming, single-tenant VPC)

SCIM provisioning, audit log streaming, and single-tenant VPC deployment are planned for a future enterprise phase.