getnora-io/nora v0.7.2

v0.7.2 — Publish Date Extraction & Per-Registry Curation Overrides

on GitHub

What's New

Publish Date Extraction (#207)

The min_release_age curation filter now extracts real publish dates from cached metadata for npm, PyPI, Cargo, and Go registries. Previously the filter was a no-op because publish dates weren't being passed through — now it actually blocks packages younger than the configured threshold.

Per-Registry Curation Overrides (#205)

Configure min_release_age per registry via TOML sections or environment variables:

[curation]
min_release_age = "7d"    # global default

[curation.npm]
min_release_age = "3d"    # npm-specific

[curation.pypi]
min_release_age = "14d"   # pypi-specific

Environment variables: NORA_CURATION_NPM_MIN_RELEASE_AGE=3d, NORA_CURATION_PYPI_MIN_RELEASE_AGE=14d, etc.

Bug Fixes

• Raw registry (#212): UI now updates immediately after upload/delete without restart

Verified

• Token RBAC (#206): last_used tracking, auto-expire rejection, description field — all functional

Stats

• 850 tests, 0 clippy warnings
• Docker images: Alpine, RedOS, Astra
• Signed with Sigstore cosign (keyless)

Docker

docker pull ghcr.io/getnora-io/nora:0.7.2

Helm

helm repo update nora
helm upgrade nora nora/nora --version 0.3.2

Full Changelog: v0.7.1...v0.7.2