CIA Compliance Manager v1.1.50
·
313 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump knip from 6.4.0 to 6.4.1 @dependabot[bot] (#1119)
- build(deps-dev): bump globals from 17.4.0 to 17.5.0 @dependabot[bot] (#1118)
- build(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the documentation group @dependabot[bot] (#1117)
- build(deps-dev): bump knip from 6.3.1 to 6.4.0 @dependabot[bot] (#1116)
📦 Dependencies
- build(deps-dev): bump knip from 6.4.0 to 6.4.1 @dependabot[bot] (#1119)
- build(deps-dev): bump globals from 17.4.0 to 17.5.0 @dependabot[bot] (#1118)
- build(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the documentation group @dependabot[bot] (#1117)
- build(deps-dev): bump knip from 6.3.1 to 6.4.0 @dependabot[bot] (#1116)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.50.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.50.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.50.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
🏗️ Built With
- ⚡ Vite 8.x — Lightning-fast build tool
- ⚛️ React 19.x — Modern UI framework
- 🔷 TypeScript 6.0 — Type-safe development
- 📊 Chart.js 4.x — Interactive data visualization
- 🧪 Vitest 4.x — Fast unit testing framework
- 🌐 Cypress 15.x — End-to-end testing
- 📦 Node.js >= 25.0.0 — Runtime environment
- 🎨 Tailwind CSS 4.x — Utility-first CSS framework
🤝 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
📋 Release Information
Full Changelog: v1.1.49...1.1.50
Build Attestations: View SLSA Attestations
Download: Release Assets
Contributors
pethers and dependabot