This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryUpdates Numbers, https://github.com/scanaislop/aislop/pull/227, and https://github.com/scanaislop/aislop/pull/236 across a mixed release.
Full changelog
Telemetry now reports how users install aislop (npm, Homebrew, pip, pipx, and more), MCP and lifecycle events flush reliably, and new quality rules catch hidden fallbacks while framework-specific scans ship as optional adapter entrypoints.
Install
npx [email protected] scan .
# or globally:
npm i -g [email protected]
Added
- Install channel telemetry —
package_managernow distinguisheshomebrew,pip,pipx, anddirectglobal installs in addition tonpm/pnpm/yarn/bun/npx. Python and other shims can setAISLOP_INSTALL_CHANNELbefore invoking the Node CLI. ai-slop/hidden-fallbackrule — flags JS/TS fallback logic that turns missing counts, failed diagnostics, or impossible states into safe-looking values without surfacing the failure (#226).- Framework adapter entrypoints — optional
@aislop/adapters/*exports for Astro, Expo, Nuxt, SvelteKit, and Vite (#224).
Fixed
- Telemetry delivery —
mcp_tool_calledandcli_command_startednow flush before the process exits. - npx install detection — telemetry recognizes
_npxcache paths andnpm_command=npx. - Scanner calibration — fewer false positives on hallucinated imports, secret detection, unused CSS, Azure namespace imports, and Bun audit flows (#227, #236).
- Source and config resolution — JSONC reads, Python target discovery, and non-production path heuristics handle more real-world repo layouts.
Changed
- Python launcher telemetry — the PyPI package sets
AISLOP_INSTALL_CHANNEL(piporpipx) before delegating to the npm CLI.
Numbers
- 1357 tests passing
- Self-scan: 100/100
Full notes in CHANGELOG.md.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AISlop
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]