@vantio/cli - npm Package Compare versions

Comparing version 0.3.15 to 0.3.16

bin/python-wrap/sitecustomize.py

 # Injected onto PYTHONPATH by `vantio run python …`.
-# Optics (and Gate, when a paid key is present on SDK 3.0.9+) wrap urllib /
-# http.client / requests / httpx / aiohttp / urllib3 / socket.connect / subprocess curl and wget for this interpreter. Missing SDK is a warning, not a crash.
+# Optics (and Gate, when a paid key is present on SDK 3.0.10+) wrap urllib /
+# http.client / requests / httpx / aiohttp / urllib3 / pycurl / socket.connect / subprocess curl and wget for this interpreter. Missing SDK is a warning, not a crash.
 import sys
@@ -5,0 +5,0 @@

package.json

 {
   "name": "@vantio/cli",
-  "version": "0.3.15",
+  "version": "0.3.16",
   "description": "Vantio Optics CLI — wrap any AI agent and observe LLM egress. Blind by design, not a proxy. Sight Loop: wrap → capture → inspect.",
@@ -5,0 +5,0 @@ "license": "MIT",

README.md

@@ -5,3 +5,3 @@ # @vantio/cli
 
-> Wrap any AI agent with **Vantio Optics** — free visibility into what it sends. Zero code changes. Current npm release: **0.3.15**.
+> Wrap any AI agent with **Vantio Optics** — free visibility into what it sends. Zero code changes. Current npm release: **0.3.16**.
 
@@ -167,5 +167,5 @@ ```bash
 
-Auto-intercepts LLM calls when running **Node.js** processes (`node`, `tsx`, `ts-node`, `npx`) — Node `fetch`, `undici.fetch`, `undici.request`, `undici.stream` / `pipeline` / `dispatch` / `connect` / `upgrade` (including tunnel bytes after upgrade), Node `http`/`https` including `ClientRequest`, Node `http2`, Node `net`/`tls`, `WebSocket` (host-block and outbound frame size), and Node-spawned `curl` and `wget` (including `env` / `timeout` / `nice`, `curl -K` `url=`, `curl -F` size from stat, stdin size when stdin is a file, `wget -i` URL lists, `sh -c`, and file-body size from `--post-file` / `@file`). Spawned httpie and aria2c share host-block from argv URLs. Current npm release: **`@vantio/cli` 0.3.15**.
+Auto-intercepts LLM calls when running **Node.js** processes (`node`, `tsx`, `ts-node`, `npx`) — Node `fetch`, `undici.fetch`, `undici.request`, `undici.stream` / `pipeline` / `dispatch` / `connect` / `upgrade` (including tunnel bytes after upgrade), Node `http`/`https` including `ClientRequest`, Node `http2`, Node `net`/`tls`, `WebSocket` (host-block and outbound frame size), and Node-spawned `curl` and `wget` (including `env` / `timeout` / `nice`, `curl -K` `url=`, `curl -F` size from stat, stdin size when stdin is a file, `wget -i` URL lists, `sh -c`, file-body size from `--post-file` / `@file`, and Gate PII rewrite of inline argv bodies). Spawned httpie shares host-block and inline `--raw` / field redaction; aria2c shares host-block from argv URLs. Current npm release: **`@vantio/cli` 0.3.16**.
 
-Python, Ruby, and other runtimes are spawned normally without this interceptor — use the [Python SDK](https://pypi.org/project/vantio-agent-sdk) (`vantio-agent-sdk` **3.0.9**, `shield()`) for Python urllib / http.client / requests / httpx / aiohttp / urllib3 / socket.connect / subprocess curl and wget.
+Python, Ruby, and other runtimes are spawned normally without this interceptor — use the [Python SDK](https://pypi.org/project/vantio-agent-sdk) (`vantio-agent-sdk` **3.0.10**, `shield()`) for Python urllib / http.client / requests / httpx / aiohttp / urllib3 / pycurl / socket.connect / subprocess curl and wget.
 
@@ -172,0 +172,0 @@ ---

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

215772

3.97%

Lines of code

4723

4.51%

Number of low supply chain risk alerts

32

-3.03%

No dependency changes