Added
- lowest known non-vulnerable direct remediation target selection based on advisory-range validation across published versions
- version-scan metrics for validated remediation targeting (scanned versions and still-vulnerable exclusions)
- automated tests for multi-step upgrade chains, overlapping advisories, and fallback behavior when advisory coverage is incomplete
- richer NestJS case-study evidence with remediation table metrics and screenshot-backed command snapshots
Changed
- direct remediation output now uses structured table rendering with package/current/target/scanned/vulnerable columns
- direct remediation tables now include a total row for consistent section-level summary in verbose output
- compact output now includes validation-summary context when scanned-version metrics are available
- README now explains the lowest-known-non-vulnerable targeting flow and references NestJS remediation evidence