rigscore v0.9.0
- #rigscore
- #security
- #ai
- #devtools
- #open-source
Changes: v0.8.0 → v0.9.0
5 features and 5 fixes. 10 changes total.
Features
- Flip CTA output to opt-in via
--cta - Runtime tool-description hashing via a print-and-paste workflow
- Augment typosquat detection with the MCP registry API
- Hash-pin MCP server shape to detect rug-pulls (CVE-2025-54136)
- Add instruction-effectiveness and skill-coherence checks
Fixes
- Scope the check to the project (cwd) by default
- Extend homoglyph coverage to Mathematical/Fullwidth/Cherokee
- Scope the version-pin check to the package-position arg only
- Correctness bugs W3 (C3, C5, H2, H4)
- Repair the broken GitHub Action and add a meaningful CI self-scan gate