v6: Trusted publishing, fast-xml-parser, and Beta mode
Key Changes
- Scoped Trusted Publishing: Migrated to @Flow-Scanner npm org with Trusted Publishing (OIDC via GitHub Actions) for Zero Trust security—no long-lived tokens, automated scans/tests, and provenance attestations to mitigate supply chain risks.
- Dependency Upgrade: Replaced xmlbuilder2 with fast-xml-parser for a more active ecosystem, reduced package size (~20% smaller footprint), and potential parsing performance gains in Flow metadata handling.
- New Config Option: Added betaMode parameter to enable experimental beta rules during scans, allowing users to opt-in for rules in development.
- Sets default severity as warning
Upgrade Guide
To update your dependencies run npm i @flow-scanner/[email protected]
Thanks for using Lightning Flow Scanner Core!