First public release

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-28 14:55:53 -04:00
commit b1cdee4a85
13 changed files with 2124 additions and 0 deletions
@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.2.0 - 2026-09-28
+
+First public release under MIT.
+
+- `scan()` finds compose services that publish host ports and so bypass the
+  reverse proxy. Sensitive ports are critical, other ports high, loopback
+  bindings informational.
+- The proxy publishing 80 and 443 is not flagged. A proxy label does not
+  excuse a published port.
+- `toReport()` and `formatScan()` produce and render a report in the
+  `@extant2000/evidence-record` format, citing file, line and binding.
+- An empty scan is reported as not assessed, never as clean.