Issues

• An interrupted --deep fetch leaves its .fetch-* staging directory in the source cache for good

  csnp/cryptodeps#70 · Filter by author thebenignhacker opened on Oct 18, 2026

• v1.4.0 release staging: CHANGELOG retitle and Added section, Known issues, v1 tag

  csnp/cryptodeps#67 · Filter by author thebenignhacker opened on Oct 18, 2026

• Smaller fixes: reachability, manifests, output (22 items)

  csnp/cryptodeps#66 · Filter by author thebenignhacker opened on Oct 18, 2026
  1

• A dotted requirement name in requirements.txt is split at its first dot

  csnp/cryptodeps#65 · Filter by author thebenignhacker opened on Oct 18, 2026

• A requirements.txt line with a space before its specifier keeps the operator in the version

  csnp/cryptodeps#64 · Filter by author thebenignhacker opened on Oct 18, 2026

• golangci-lint run exits 3 on the committed .golangci.yml with golangci-lint 2.x

  csnp/cryptodeps#61 · Filter by author thebenignhacker opened on Oct 18, 2026

• README badge test does not examine a static badge that is not wrapped in a link

  csnp/cryptodeps#57 · Filter by author thebenignhacker opened on Oct 17, 2026

• 1.3.1 release test: minor findings (checklist)

  csnp/cryptodeps#39 · Filter by author thebenignhacker opened on Oct 17, 2026

• 1.3.1 release test: important findings (checklist)

  csnp/cryptodeps#38 · Filter by author thebenignhacker opened on Oct 17, 2026

• The Action documents uses: csnp/qramm-cryptodeps@v1, and no v1 tag or branch exists

  csnp/cryptodeps#37 · Filter by author thebenignhacker opened on Oct 17, 2026

• A project whose only dependency is a post-quantum library fails the default gate on inferred findings and is told to adopt that library

  csnp/cryptodeps#35 · Filter by author thebenignhacker opened on Oct 17, 2026

• Per-dependency analysis records carry toolVersion dev or empty beside a correct top-level tool version

  csnp/cryptodeps#34 · Filter by author thebenignhacker opened on Oct 17, 2026

• The action's exit-code output says 0=clean and 3=partial whatever the fail-on input is

  csnp/cryptodeps#27 · Filter by author thebenignhacker opened on Oct 17, 2026

• --offline still uses a database downloaded earlier, so the 1.3.0 workaround does not hold

  csnp/cryptodeps#15 · Filter by author thebenignhacker opened on Oct 16, 2026

• A scan that examined none of the dependencies exits 0, the code for a clean result

  csnp/cryptodeps#13 · Filter by author thebenignhacker opened on Oct 16, 2026

• Dependencies declared through an alias, a URL, an include or a replace are skipped or scored under the wrong name

  csnp/cryptodeps#12 · Filter by author thebenignhacker opened on Oct 16, 2026

• Proposal: language-agnostic reachability engine with a shared call-graph interface, plus a Python frontend

  csnp/cryptodeps#8 · Filter by author didacmir opened on Oct 11, 2026

• cryptodeps.exe for Windows

  csnp/cryptodeps#7 · Filter by author SilverXen opened on Aug 5, 2026