3 Commits

Author	SHA1	Message	Date
Peter Steinberger	ed8f50f240	refactor: simplify plugin dependency handling ... Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths. Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.	2026-05-01 21:32:22 +01:00
Vincent Koc	6e73101df3	chore(ci): widen CodeQL PR guard ... Runs the PR CodeQL security guard as high-confidence high/critical security coverage and adds the initial plugin/package-contract quality guard.	2026-04-29 20:06:50 -07:00
Vincent Koc	6717f8b334	chore(ci): add plugin trust CodeQL shard ... Adds the plugin trust-boundary CodeQL security shard on Blacksmith and documents the rollout scope.	2026-04-29 15:02:06 -07:00