getnora-io/nora v0.7.1 on GitHub

What's New

Min-Release-Age Filter (#132)

Supply chain protection: block packages younger than a configurable threshold.

# Block packages published less than 7 days ago
NORA_CURATION_MODE=enforce
NORA_CURATION_MIN_RELEASE_AGE=7d

Supported durations: Nd (days), Nh (hours), Nw (weeks). Unknown publish dates are skipped (safe default).

Currently extracts publish dates from: npm (time field), PyPI (upload_time), Cargo (created_at). Other registries pass through without age check.

Token RBAC Polish (#124)

Expired tokens show red badge and sorted to bottom with reduced opacity
format_expiry() correctly shows "in 28d" for future, "expired 3d ago" for past
#[non_exhaustive] on Role enum for forward compatibility

Dynamic Stats Footer

Demo builds show live metrics from /proc instead of hardcoded values:

Binary size (from /proc/self/exe)
Memory usage (VmRSS from /proc/self/status)
Enabled registry count
Uptime

Testing

850 tests (up from 821), 0 clippy warnings

Breaking Changes

None. Full backward compatibility with v0.7.0 configuration.

Install

curl -fsSL https://getnora.io/install.sh | sh

Or download the binary directly:

curl -LO https://github.com/getnora-io/nora/releases/download/v0.7.1/nora-linux-amd64
chmod +x nora-linux-amd64
sudo mv nora-linux-amd64 /usr/local/bin/nora

Docker

Alpine (standard):

docker pull ghcr.io/getnora-io/nora:0.7.1

RED OS:

docker pull ghcr.io/getnora-io/nora:0.7.1-redos

Astra Linux SE:

docker pull ghcr.io/getnora-io/nora:0.7.1-astra

Kubernetes

helm repo update
helm upgrade nora nora/nora --version 0.3.1

What's Changed

docs: mark CHANGELOG v0.7.0 released by @devitway in #199
fix: immutable SHA tags in Docker image builds by @devitway in #200
feat: v0.7.1 — min-release-age, token UI, dynamic stats by @devitway in #202

Full Changelog: v0.7.0...v0.7.1