v2.11 v2.11.0
caddyserver/caddyAug 27, 2026 → Aug 28, 20261 day between releases
What's New
Adds npm supply-chain coverage and LLM sampling controls
New Features
- Parse npm lockfile versions 1, 2, and 3
- Analyze bundled hooks and sensitive transfers (BH1-BH3)
- Add SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED controls
- Implement secure file traversal using O_PATH
- Remove MP3 and P6 false positives for nominal grammar
Improvements
- Expand help text for supported providers
- Resolve model defaults from actual provider
Bug Fixes
- Remove MP3 and P6 false positives for nominal grammar
Upgrade Notes
Configuration now supports SKILLSPECTOR_TEMPERATURE and SKILLSPECTOR_SEED for LLM sampling. Ensure npm lockfiles are up to date for accurate version resolution.
The Two Releases
v2.11
Aug 27, 2026· 2 months ago
This release introduces new bundled plugins, significantly improves streaming and real-time UI performance, adds vision sidecar integration, and delivers broad reliability fixes across memory, embeddings, context handling, and the interactive browser.
Full release notesSkillSpector v2.11.0
Aug 28, 2026· 2 months ago
Expands supply-chain coverage to installed npm dependency versions, adds bounded analysis of bundled lifecycle hooks, and introduces optional LLM sampling controls.
Full release notes