safe v1.1.2

Patch release for dispatcher-style command naming and help consistency.

Changes:

• Prefer safe run, safe audit, and safe install across docs, help, status, version, and wrapper output.
• Route install wrappers through the safe audit dispatcher command.
• Make safe audit help show audit help instead of erroring.

Checksum:

4b85c60b7a72286a6122ce932efd854ca6fc321ef9b202d160fe06009edfc767  safe-v1.1.2.tar.gz

Verify downloads:

sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

safe v1.1.1

Patch release for installer shell-integration safety.

Changes:

• Preserve symlinked .zshrc files when installing, migrating, or uninstalling safe shell integration lines.
• Add regression coverage for symlinked .zshrc install and uninstall flows.

Checksum:

d17cb4f0c66ae69a233c2044c97a4927d71c2600d186e6aec5a25b5ea9b689d8  safe-v1.1.1.tar.gz

Verify downloads:

sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

v1.1.0

v1.1.0

• Add audited safe install -g host installs with confirmation before delegation.
• Add global install translation for npm, pnpm, yarn, bun, and Composer.
• Add exact-version --trust-host support and post-install trust prompts for npm packages while refusing to trust latest, omitted versions, dist-tags, or ranges.
• Update help, completions, and docs to prefer safe run and safe audit over legacy hyphenated command names.

Release assets:

• safe-v1.1.0.tar.gz
• SHA256SUMS
• SHA256SUMS.asc

Verify:

sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

Checksum:

5f02047a0e53ca4c6058204297e04badac3c104ace9a1ab1f02eaa07db8d5470  safe-v1.1.0.tar.gz

CI provenance is not claimed for this manual release.

safe v1.0.1

Security hardening patch for safe-audit setup.

Changes:

• safe-audit setup no longer downloads scanner binaries, runs upstream installer scripts, or runs language package installers.
• Scanner setup now fails closed unless required scanners already exist or an explicit local scanner bundle is provided.
• Socket CLI is optional for scanner setup.

Release verification:

git tag -v v1.0.1
sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

Signing key fingerprint:

5FA5B0FC33139A9E062BA2F80878846631FFD1E0

Checksum:

b3ba70f0b75b66d507bb78a35ec0f35368cbfc478abbbdc659930317e9bd9c81  safe-v1.0.1.tar.gz

safe v1.0.0

Initial public release baseline.

Release verification:

git tag -v v1.0.0
sha256sum -c SHA256SUMS
gpg --verify SHA256SUMS.asc SHA256SUMS

Signing key fingerprint:

5FA5B0FC33139A9E062BA2F80878846631FFD1E0

Checksum:

30d89a571905a86722c94625cd8d9478287c26372a93b33ce4afb73cdc7b278b  safe-v1.0.0.tar.gz