# Stackline changes

## 1.0.0

- Independent scoped maintenance release based on the exact upstream source listed in UPSTREAM.md. Runtime source, CLI names, license, API and engine declarations are preserved.
- Replaced obsolete development-only release, coverage and lint tooling with supported test dependencies. Retained functional upstream suites and added packed-consumer contract checks.
- Added audited reproducible CI, CodeQL, artifact-only npm publication with provenance, and immutable GitHub release evidence.

- Security: replace exponential-backtracking comment detection in getSource with a linear scan, preserving ES5 syntax and public behavior.