v1.0.0 — Initial public release

ZeroPath plugin for AI code agents. AppSec scanning (SAST, secrets, SCA, IaC),
finding triage, custom rules, and exploitability checks — reachable from chat
in Claude Code.

Install

Requires uvx on PATH.

What ships

• 10 slash commands: /zeropath:scan, /zeropath:findings, /zeropath:fix,
  /zeropath:investigate, /zeropath:triage, /zeropath:rule,
  /zeropath:explain, /zeropath:claude, /zeropath:statusline,
  /zeropath:update
• 6 subagents wired to the same surface
• 4 hooks: session-start banner, post-edit file tracking, pre-push / pre-PR
  soft warnings, pre-compact context preservation
• MCP wiring to zeropath-mcp-server (uvx-installable)
• CLI wiring to zeropath-cli (auto-downloaded on first scan)

Verified

• 90 tests across 12 suites
• CI matrix: Linux / macOS / Windows × Node 22 + 24
• claude plugin validate --strict passes

MIT licensed. See the README for full usage.