- Refactored into testable modules (config, prompts, llm, checks)
- Comprehensive unit tests for config loading/merging/overrides,
severity blocking, prompt construction (OWASP/CWE enforcement),
LLM JSON extraction (noisy output handling),
check run annotations, PR comments, filtering
- All claims from spec validated (21 tests)
- Dist bundle included for action consumption
- Private repo under SquidSec for self-hosted runner support
