Replicated adversary

An Adversary Labs adversary for continuously reviewing how applications are delivered with Replicated.

Version 0.0.1 is intentionally a no-op: it runs successfully and emits no findings. Delivery checks will be added incrementally as the guidance is developed.

Development

Node.js 22 or newer is required.

npm ci
npm test

The runtime entrypoint is built into dist/index.js with npm run build.

Releases

Push a semantic version tag such as v0.0.1. The Depot release workflow synchronizes the tag into adversary.yaml and npm package metadata, commits the bump to main with [skip-ci], and verifies the no-op adversary. Registry publishing will be added separately.