Release changes
What changed.And where to verify it.
This page highlights the current version. The repository CHANGELOG.mdis the complete record, including earlier releases and fixes. Use the verification guide for signed release artifacts.
0.7.0 · 27 October 2026
Repyy 0.7.0 adds focused review skills, Python startup and response-flow checks, and updated package indicators.
repyy-explain,repyy-review, andrepyy-intelcheck reports, scan gaps, and indicators. The main skill routes these tasks and asks for missing inputs.- Python checks cover startup imports and simple remote responses reaching execution or compilation, with source locations and review limits.
- Archive size accounting rejects oversized ZIP64 declarations before conversion; Python equality, encoding and line-ending gaps are fixed.
- Node and Go build pins include security fixes. Unverified manual VM recipes are removed, and Docker claims describe the available evidence.
Read the full 0.7.0 entry, skill guide, and coverage limits.
0.6.0 · 26 September 2026
Repyy 0.6.0 adds narrow static checks for malicious package advisories, literal JavaScript decoding, and supported Axios response flows into execution.
| Area | Change | Read more |
|---|---|---|
| Intelligence | Sourced records for three malicious npm packages; clearer exact-version and unlocked-range results. | Intelligence guide |
| Behavior | Bounded data-only literal recovery and same-function Axios-to-execution correlation with source locations. | Rule reference |
| Coverage | Explicit incomplete status for unsupported decoding and resource limits; less weak noise in vendor bundles. | Coverage guide |
| Review workflow | A refreshed 11-pair inert demo and a bounded maintainer path for advisory ingestion. | Demo report |
The full 0.6.0 entry lists the smaller fixes and release details.
Earlier releases
Browse published releases for assets and release notes, or read thecomplete changelog for the chronological change history. A version heading on this page describes code changes; it does not replace the release verification record.