• Fix crash when scanning targets without a matching public suffix (e.g. localhost or raw IP addresses) — now falls back to using the full hostname instead of throwing

• Dependency updates
• Add integration test suite
• Simplify GitHub Actions test workflow

• Dependency updates

• Deduplicate vulnerabilities in CycloneDX output — advisories with the same ID are now merged into a single entry, with all affected components listed in the affects array

• Fix URL argument parsing when --header, --cookies, or --sbom-file values were present
• Fix missing request-level error handler when downloading the retire.js vulnerability database
• Fix HTTP/1.1 response stream errors leaving the promise permanently pending
• Fix HTTP/2 race condition where concurrent requests to the same origin fired on a not-yet-connected session

• Various smaller bugs

• Add --sbom-file argument to write SBOM output to a file

• Fix group vs name for scoped names in CycloneDX output

• Add dependencies to CycloneDX

• Try to fix download speed for source maps

• Fix encoding of PURLs in SBOM output

• Add missing CWEs in SBOM output

• Broken references in SBOM output

• Include licenses in SBOM output

• Improve CycloneDX vulnerability IDs

• Fix bug related to deepscans in retire.js

• Add purl to SBOM output

• Add support for color output via --color
• Move parsing errors for deepscan to debug

Add support for detecting the use of known bad CDNs.

Add file name scanning

Add AST scanning

Add support for .js.LICENSE.txt

Renaming repository from retire-scanner to retire-site-scanner as name was taken

Renaming from retire-scanner to retire-site-scanner as name was taken

Fixing build script

Fixing build script

Initial version