Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 15 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,20 @@

All notable changes to CVE Lite CLI will be documented in this file.

## [1.1.0] - 2026-04-04

### Added
- Local SQLite advisory database foundation for offline advisory lookups
- `cve-lite advisories sync` command to download the official OSV npm dump and build the local advisory DB
- Offline scanning with `--offline` using the default local advisory DB
- Explicit local DB selection with `--offline-db <path>`
- Progress reporting during advisory DB sync, including download and ingest progress

### Changed
- CLI output now reports when offline mode is enabled and when the local advisory DB is being used as the advisory source
- README now highlights offline advisory DB support, offline workflows, and scheduled DB refresh guidance more prominently
- Coverage notes now clarify that offline scans do not make outbound advisory API calls

## [1.0.6] - 2026-04-02

### Added
Expand All @@ -18,4 +32,4 @@ All notable changes to CVE Lite CLI will be documented in this file.
- Configurable OSV endpoint support

### Changed
- README updates and documentation fixes
- README updates and documentation fixes
4 changes: 2 additions & 2 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "cve-lite-cli",
"version": "1.0.6",
"version": "1.1.0",
"description": "Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local lockfiles and OSV",
"type": "module",
"bin": {
Expand Down
Loading