CIA Compliance Manager v1.1.76
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump the typescript-types group with 2 updates @dependabot[bot] (#1211)
- build(deps-dev): bump postcss from 8.5.14 to 8.5.15 in the tailwindcss group @dependabot[bot] (#1210)
- build(deps-dev): bump @types/node from 25.8.0 to 25.9.0 in the typescript-types group @dependabot[bot] (#1209)
- build(deps-dev): bump typescript-eslint from 8.59.3 to 8.59.4 in the eslint group @dependabot[bot] (#1208)
📦 Dependencies
- build(deps-dev): bump the typescript-types group with 2 updates @dependabot[bot] (#1211)
- build(deps-dev): bump postcss from 8.5.14 to 8.5.15 in the tailwindcss group @dependabot[bot] (#1210)
- build(deps-dev): bump @types/node from 25.8.0 to 25.9.0 in the typescript-types group @dependabot[bot] (#1209)
- build(deps-dev): bump typescript-eslint from 8.59.3 to 8.59.4 in the eslint group @dependabot[bot] (#1208)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.76.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.76.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.76.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
🏗️ Built With
- ⚡ Vite 8.x — Lightning-fast build tool
- ⚛️ React 19.x — Modern UI framework
- 🔷 TypeScript 6.0 — Type-safe development
- 📊 Chart.js 4.x — Interactive data visualization
- 🧪 Vitest 4.x — Fast unit testing framework
- 🌐 Cypress 15.x — End-to-end testing
- 📦 Node.js >= 25.0.0 — Runtime environment
- 🎨 Tailwind CSS 4.x — Utility-first CSS framework
🤝 Contributors
Thanks to @dependabot[bot] and dependabot[bot] for their contributions to this release!
📋 Release Information
Full Changelog: v1.1.75...1.1.76
Build Attestations: View SLSA Attestations
Download: Release Assets
Contributors
dependabot