# PHPGuard 1.3.0 — Release Notes

- Added read-only APT package provenance and candidate version inventory for PHP CLI and PHP-FPM packages.
- Added package-origin visibility to server details and exported JSON reports.
- Corrected the Docker PHP version probe.
- Preserved compatibility with earlier stored scan results.
- Updated build number to 4 and version to 1.3.0.
- Retained the Debug build and signed/notarized DMG release scripts.

## Limitations

APT origin and version information **does not** establish whether a specific CVE is fixed. Ubuntu security backports, package provenance, and vendor advisories still require verification. The CVE Research tab lists keyword-search results, not confirmed server exposures. Scans are read-only and do not remediate systems.

## Build on macOS

`./Scripts/build.sh`

## Release on macOS

`NOTARY_PROFILE=orion-notary ./Scripts/release.sh`

Requires Xcode, a Developer ID Application signing identity, and a configured notarytool keychain profile.