Changelog

v0.1.0

Initial release.

Core Infrastructure

• MetaCredo.Check behaviour macro mirroring Credo.Check ergonomics.
• MetaCredo.SourceFile wrapping Metastatic.Document with source text.
• MetaCredo.Issue struct with priority/severity/exit status.
• MetaCredo.Config for .metacredo.exs configuration parsing.
• MetaCredo.Execution pipeline: source discovery, check execution, inline disable filtering.
• MetaCredo.Sources for multi-language file discovery and parsing.
• MetaCredo.CLI.Output with colored terminal output and JSON format.
• mix metacredo task with --strict, --only, --ignore, --format, and explain subcommand.
• mix metacredo.gen.config for generating default configuration.
• Inline disable comments via # metacredo:disable-for-next-line and # metacredo:disable-for-this-file.

Checks -- 45 total

Security (15): HardcodedValue, SQLInjection, XSSVulnerability, PathTraversal, SSRFVulnerability, SensitiveDataExposure, MissingCSRFProtection, InsecureDirectObjectReference, UnrestrictedFileUpload, TOCTOU, MissingAuthentication, MissingAuthorization, IncorrectAuthorization, ImproperInputValidation, InlineJavascript.

Warning (14): MissingErrorHandling, SilentErrorCase, SwallowingException, NPlusOneQuery, MissingPreload, UnmanagedTask, SyncOverAsync, MissingHandleAsync, DirectStructUpdate, CallbackHell, BlockingInPlug, MissingThrottle, InefficientFilter, ImperativeStatusHandling.

Readability (5): MagicNumber, DeepNesting, LongFunction, ComplexConditional, LongParameterList.

Refactor (3): SimplifyConditional, DeadCode, CodeDuplication.

Design (3): HighComplexity, LowCohesion, HighCoupling.

Observability (5): MissingTelemetryInObanWorker, MissingTelemetryInLiveviewMount, MissingTelemetryInAuthPlug, MissingTelemetryForExternalHttp, TelemetryInRecursiveFunction.