| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-02-15 | 779 Bytes | |
| v0.4.2 source code.tar.gz | 2026-02-15 | 16.3 MB | |
| v0.4.2 source code.zip | 2026-02-15 | 16.4 MB | |
| Totals: 3 Items | 32.6 MB | 0 | |
Security Fix
Defense-in-Depth: Credential Leak Prevention (#138)
Agents no longer commit .env files, credentials, or node_modules/ to repositories. Three layers of protection added across both feature-dev and bug-fix workflows:
- Setup agent — creates
.gitignore(stack-appropriate defaults) and.env.exampleif missing - Developer/Fixer agents — pre-commit security checklist: never stage
.env,*.key,*.pem,node_modules/, or credential files - Verifier agent — security checks run first as non-negotiable gate: rejects if
.gitignoremissing, sensitive files in diff, or hardcoded credentials detected
Affected files: setup agent, verifier agent, developer agent, fixer agent, feature-dev workflow.yml, bug-fix workflow.yml