cleanlib-client 0.1.19

HTTP client SDK for the CleanLibrary verdict API — VerdictEnvelopeV1 types, derive_status logic, transport, config, and risk-acceptance YAML emitter shared between cleanlib-cli and other CleanLibrary consumers.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

[package]
name = "cleanlib-client"
# CLEANLIB-126 M1″ cycle-13 — per-crate version (overrides workspace 0.1.0)
# to ship crate-root re-exports (Client, Verdict, PolicyDecision). cleanlib-cli
# stays on workspace 0.1.0 (no re-publish this cycle); workspace.dependencies
# pin bumped to 0.1.1 so the next cli ship picks up automatically.
# 0.1.19 — CLEANLIB-780 (axes envelope): adds `axes: Option<Axes>` to Verdict
# (Axes / AxisAdvisory / AxisThreat / AxisAvailability), mirroring the App #477
# wire, so consumers render the advisory / threat / availability planes SEPARATELY
# (a consulted-and-empty advisory reads as honest GREEN, not an alarmist data-gap).
# Purely ADDITIVE over the published 0.1.15 (tail-appended, serde default, skip-None
# on the wire, self-healing bincode cache). Shipped in a COMBINED cleanlib 0.1.19
# release with the cleanlib-cli v1-lock fix (CLEANLIB-682) per BD direct-word "ship
# both together 0.1.19"; 0.1.16-0.1.18 skipped for the client so both crates align
# at 0.1.19. cleanlib-cli 0.1.19 consumes these types (path-1) to render axes.
# 0.1.15 — CLEANLIB-682 release train: the published 0.1.14 is stale vs source.
# Republish so cleanlib-cli 0.1.11 can build against the API it uses — remediation
# / freshness / coverage / reason_class / policy_version / attestation_status /
# customer_state on Verdict+ScanResult+ScanResponse, plus telemetry_enabled /
# migrate_telemetry_consent / ecosystem_from_path (CX-3/627/691 + siblings).
version = "0.1.19"
edition.workspace = true
rust-version.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
description = "HTTP client SDK for the CleanLibrary verdict API — VerdictEnvelopeV1 types, derive_status logic, transport, config, and risk-acceptance YAML emitter shared between cleanlib-cli and other CleanLibrary consumers."
keywords = ["security", "dependencies", "verdicts", "supply-chain", "sdk"]
categories = ["api-bindings", "development-tools"]

[dependencies]
serde = { workspace = true }
serde_json = { workspace = true }
toml = { workspace = true }
dirs = { workspace = true }
thiserror = { workspace = true }
chrono = { workspace = true }
reqwest = { workspace = true }
tokio = { workspace = true }
futures-util = { workspace = true }

[dev-dependencies]
sha2 = "0.10"