Changes for version 0.03 - 2026-09-08
- Repurposed from a code-search / plagiarism client into a legal-review client. "check" now uploads the project's working tree to Cavil, waits for the standard legal review (unpack, index, analyze), and reports its licensing risk; the code-search "baseline" command, local fingerprinting and result cache are gone, along with their Cavil::Matcher, Mojo::SQLite, Text::Glob and Cpanel::JSON::XS dependencies.
- The uploaded archive is the working tree as it sits on disk, including installed vendored dependencies (node_modules and the like) that .gitignore usually hides but a full legal review must cover; only .git and explicit excludes are dropped. Use --respect-gitignore for the leaner case, --exclude-path or a .cavilignore file to drop more.
- The CI gate is the report's licensing risk: --fail-on-risk defaults to the instance's acceptable risk plus one, so a project the instance would accept passes without any per-project configuration. --sbom and --notice download the SPDX SBOM and NOTICE attribution file.
Documentation
Modules
Submit a project to Cavil for a legal review and gate CI on the result
Provides
in lib/Cavil/CLI/Archive.pm
in lib/Cavil/CLI/Client.pm
in lib/Cavil/CLI/Config.pm
in lib/Cavil/CLI/Progress.pm
in lib/Cavil/CLI/Util.pm