All pull requests

Pull requests

• refactor(cli): extract CLI flag literals into named constants (#420 task 1)

  #1230·prx-my opened Sep 23, 2026·

  ·
  1

  1

• refactor(cli): de-duplicate flag-conflict errors (#420 task 3)

  #1229·prx-my opened Sep 23, 2026·

  ·
  1

• style(cli): add braces to remaining single-line if statements (#420 task 4)

  #1228·prx-my opened Sep 23, 2026·

  ·
  1

• feat(oa011): flag override floors that exceed every declaring package's range

  #1226·MRX-72 opened Sep 23, 2026·

  ·
  1

  1

• fix: keep unconfirmed fix hints out of runnable commands

  #1204·XonkelX opened Sep 21, 2026·

  ·
  1

  4

• refactor: extract install command (issue #420, task #2)

  #1203·VolodymyrLinuxovich opened Sep 20, 2026·

  ·

• fix(usage): surface the 5000-file scan cap so --only-used can't drop findings (#1180)

  #1202·prx-my opened Sep 20, 2026·

  ·
  1

  2

• fix(output): align HTML report.json with --json output shape

  #1176·alex-powell opened Sep 20, 2026·

  ·
  1

  1

• feat(prioritization): add contextual usage/reachability/exposure signals

  #1175·alex-powell opened Sep 20, 2026·

  ·
  1

  3

• test: smoke test for the PR dependency-delta comment (do not merge)

  #1155·sonukapoor opened Sep 17, 2026·

  ·
  1

• test: add coverage for phantom-utils (getDeclaredPackages and installCmd)

  #1124·emihesi99 opened Sep 12, 2026·

  ·
  1

  4

• fix(pd001,pd002): resolve imports per workspace member and ignore type-only imports

  #1114·osfv opened Sep 9, 2026·

  ·
  1

  5

• feat(cli): add --scan-timeout guard for large projects

  #1100·Ayush7614 opened Sep 7, 2026·

  ·
  1

  5

• feat(action): add sbom input so SPDX output is reachable from the GitHub Action

  #1099·Ayush7614 opened Sep 7, 2026·

  ·
  1

  4