Issues

• Enhancement: coalesce identical parse-degrade warnings on large trees

  enhancement
  vibgrate/cli#312 · Filter by author vibgrate-team opened on Oct 1, 2026

• Docs: document vg evidence readiness, regimes, and drill for first-time contributors

  documentation
  vibgrate/cli#311 · Filter by author vibgrate-team opened on Oct 1, 2026

• Bug: actionable error when a lockfile is truncated or mid-parse invalid

  bug
  vibgrate/cli#310 · Filter by author vibgrate-team opened on Oct 1, 2026

• Test: add Helm Chart.yaml / Chart.lock edge-case fixture for vg scan --iac

  enhancementgood first issue
  vibgrate/cli#309 · Filter by author vibgrate-team opened on Oct 1, 2026

• Docs: document vg scan CI fail thresholds for severity, RiskScore, and EPSS

  documentation
  vibgrate/cli#308 · Filter by author vibgrate-team opened on Oct 1, 2026

• Enhancement: stable dependency-edge ordering when package name collisions occur in vg build graphs

  enhancement
  vibgrate/cli#307 · Filter by author vibgrate-team opened on Oct 1, 2026

• Bug: actionable error when an input SPDX/CycloneDX SBOM fails schema validation

  bug
  vibgrate/cli#306 · Filter by author vibgrate-team opened on Oct 1, 2026

• Docs: document vg ask local-first expectations and when network is used

  documentationgood first issue
  vibgrate/cli#305 · Filter by author vibgrate-team opened on Oct 1, 2026

• Test: add Swift Package.resolved edge-case fixture for vg build

  enhancementgood first issue
  vibgrate/cli#304 · Filter by author vibgrate-team opened on Sep 30, 2026

• Docs: document Maven groupId/artifactId to PURL and CycloneDX mapping in vg sbom

  documentation
  vibgrate/cli#303 · Filter by author vibgrate-team opened on Sep 30, 2026

• Enhancement: group transitive advisory aliases stably in vg scan --vulns JSON

  enhancement
  vibgrate/cli#302 · Filter by author vibgrate-team opened on Sep 30, 2026

• Bug: parse-worker failures must exit cleanly without leaving orphan processes

  bug
  vibgrate/cli#301 · Filter by author vibgrate-team opened on Sep 30, 2026

• Docs: document air-gapped vg evidence export then verify offline lifecycle

  documentation
  vibgrate/cli#300 · Filter by author vibgrate-team opened on Sep 30, 2026

• Enhancement: deduplicate identical license findings for the same component and path

  enhancement
  vibgrate/cli#299 · Filter by author vibgrate-team opened on Sep 30, 2026

• Bug: preserve SemVer build-metadata (+…) through vg sbom and scan JSON

  bug
  vibgrate/cli#298 · Filter by author vibgrate-team opened on Sep 30, 2026

• Docs: document Windows PATH and install expectations for vg

  documentationgood first issue
  vibgrate/cli#297 · Filter by author vibgrate-team opened on Sep 30, 2026

• Docs: document vg serve --http local binding and offline boundaries

  documentation
  vibgrate/cli#295 · Filter by author vibgrate-team opened on Sep 29, 2026

• Bug: actionable error when binary or non-UTF8 files are treated as source text

  bug
  vibgrate/cli#294 · Filter by author vibgrate-team opened on Sep 29, 2026

• Enhancement: stable deterministic ordering of findings arrays in vg scan JSON

  enhancement
  vibgrate/cli#293 · Filter by author vibgrate-team opened on Sep 29, 2026

• Docs: document vg fix ranked upgrade plans and local-first bounds

  documentation
  vibgrate/cli#292 · Filter by author vibgrate-team opened on Sep 29, 2026

• Test: add Gradle gradle.lockfile edge-case fixture for vg build

  enhancementgood first issue
  vibgrate/cli#291 · Filter by author vibgrate-team opened on Sep 29, 2026

• Test: add Maven multi-module / dependencyManagement fixture for vg build

  enhancementgood first issue
  vibgrate/cli#290 · Filter by author vibgrate-team opened on Sep 29, 2026

• Bug: actionable warning when a supported-language file fails tree-sitter parse

  bug
  vibgrate/cli#289 · Filter by author vibgrate-team opened on Sep 29, 2026

• Docs: document DriftScore, RiskScore, and DriftRisk fields in vg scan JSON

  documentationgood first issue
  vibgrate/cli#288 · Filter by author vibgrate-team opened on Sep 29, 2026

• Bug: actionable error when vg evidence verify reads a truncated or corrupt bundle

  bug
  vibgrate/cli#287 · Filter by author vibgrate-team opened on Sep 28, 2026