Revera @ 1.0.0 릴리스

작성자

카테고리:

← 피드로
DEV Community · Aarav Maloo · 2026-07-18 개발(SW)
Cover image for Releasing revera@1.0.0

Aarav Maloo

Today I launched [email protected], upgrading from 0.1.0 to stable.
revera is a CLI that scores npm packages for security risk before you install them. The 1.0.0 rewrite replaces fixed weights with a Bayesian evidence engine: every package becomes a node in its dependency graph, gets scored across 8 categories from real signals (vuln feeds, publisher trust, GitHub activity, typosquat detection), and risk propagates bottom-up through the whole dependency tree, not just the top-level package.
Previously it used pre-defined weights. Now it decides its own weights from the evidence.
npm install revera

원문에서 계속 ↗

추출 본문 · 출처: dev.to · https://dev.to/aaravmaloo/releasing-revera100-2llo

코멘트

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다