Official company announcements, research releases, and product news from Vibgrate. Where relevant, releases link directly to the supporting research, data, and methodology. For technical analysis and perspectives, visit the blog. For product updates, see the changelog.
vg review reads a change from the local code map, gives one policy-owned decision, and ships the result as a versioned receipt — locally, before the pull request. A new Review panel in Vibgrate for VS Code runs the same review on uncommitted changes.
Read the press releaseThe Vibgrate CLI now reads the image digest, source commit, base images, and SBOM that BuildKit already wrote, so a frozen release manifest is tied to the container image that shipped rather than to values typed in by hand.
Read the press releaseSigned, reproducible records show which released product versions contain components affected by an actively exploited vulnerability, helping manufacturers establish scope and prepare CRA Article 14 notifications.
Read the press releaseIn Vibgrate's latest pinned A/B benchmark, an AI coding assistant using Vibgrate AI Context consumed 493,895 tokens, against 670,169 with generic file discovery — 26.3% fewer across the approximately 300-file test tier.
Read the press releaseThe local-first, read-only server gives compatible coding assistants access to version-correct library documentation, a repository code map, and offline drift information through the Model Context Protocol.
Read the press releaseThe extension brings a locally computed DriftScore and per-dependency version drift into the editor, using the same scoring engine as the Vibgrate CLI.
Read the press releaseVibgrate has published the data sources, scoring factors, formulas, and limitations behind DriftScore, RiskScore, and DriftRisk™. The methodology is available under CC BY 4.0 and permanently archived on Zenodo.
Read the press releaseThe CLI can export software bills of materials in CycloneDX and SPDX formats, compare dependency changes between scan artifacts, and generate OpenVEX documents from the same local scanning workflow.
Read the press releaseA hardened scanning profile suppresses local file writes and disables high-context scanners, for teams in financial services, healthcare, government, and other environments under strict data governance.
Read the press releaseOffline mode provides full drift scanning without any network calls, using a downloadable package-version manifest for version lookups — announced alongside the CLI's public npm release.
Read the press releaseThe first public @vibgrate/cli package measures upgrade drift across Node.js and .NET projects and can run locally from the terminal or in CI.
Read the press release