Fix: File permissions

package.json

@@ -15,7 +15,7 @@
     "build:spdx": "ts-node scripts/build-spdx.ts",
     "build:report-ui": "cd report-ui && npx vite build",
     "build:report": "npm run build:report-ui && npx ts-node scripts/build-report.ts",
-    "build": "npm run clean && npm run build:spdx && npm run build:report && tsc",
+    "build": "npm run clean && npm run build:spdx && npm run build:report && tsc && node -e \"require('fs').chmodSync('dist/cli.js', 0o755)\"",
     "dev": "ts-node src/cli.ts scan",
     "scan": "node dist/cli.js scan",
     "test": "npm run test:unit",
@@ -26,7 +26,7 @@
     "test:fixtures:all": "npm --prefix test-fixtures run test:all",
     "test:docker:node14": "node scripts/test-docker-node14.js",
     "test:docker": "npm run test:docker:node14",
-    "test:pack": "npm pack --dry-run",
+    "test:pack": "node scripts/check-pack.js",
     "test:release:ok": "node -e \"console.log('\\n✅ test:release passed')\"",
     "test:release": "npm run build && npm run test:unit && npm run test:fixtures:all && npm run test:docker && npm run test:pack && npm run test:release:ok",
     "prepublishOnly": "npm run build"

report-ui/style.css

@@ -5,7 +5,6 @@
 }
 
 :root {
-  /* Dark theme (default) - Modern dev-focused palette */
   --bg-primary: #0c1222;
   --bg-secondary: #151d2e;
   --bg-card: rgba(21, 29, 46, 0.95);
@@ -15,15 +14,10 @@
   --text-muted: #5c6b82;
   --border-color: rgba(99, 120, 150, 0.2);
   --border-color-strong: rgba(99, 120, 150, 0.35);
-
-  /* Fresh accent - teal/cyan that says "up to date" */
   --accent: #06b6d4;
   --accent-hover: #22d3ee;
   --accent-subtle: rgba(6, 182, 212, 0.15);
 
-  /* Title gradient - fresh, modern, not purple */
-  --title-gradient: linear-gradient(135deg, #06b6d4 0%, #10b981 100%);
-
   /* Status colors */
   --green: #10b981;
   --green-bg: rgba(16, 185, 129, 0.15);
@@ -149,7 +143,7 @@ body {
   margin: 0;
   font-size: 26px;
   font-weight: 700;
-  background: var(--title-gradient);
+  background-color: var(--accent);
   -webkit-background-clip: text;
   -webkit-text-fill-color: transparent;
   background-clip: text;
@@ -309,7 +303,7 @@ body {
   grid-template-columns: auto minmax(190px, 1fr) minmax(220px, 0.9fr);
   align-items: center;
   gap: 16px;
-  padding: 8px 12px 8px 16px;
+  padding: 8px 12px 8px 8px;
   color: var(--text-primary);
   text-decoration: none;
   border: 1px solid rgba(6, 182, 212, 0.36);
@@ -345,6 +339,7 @@ body {
   border: 1px solid var(--border-color-strong);
   border-radius: 999px;
   box-shadow: inset 0 0 20px rgba(6, 182, 212, 0.1);
+  background-color: var(--bg-primary);
 }
 
 .cta-icon-svg {
@@ -378,7 +373,7 @@ body {
   justify-content: center;
   gap: 12px;
   padding: 9px;
-  border-radius: 12px;
+  border-radius: 10px;
   background: var(--accent);
   color: white;
   font-size: 15px;

scripts/check-pack.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+
+const { execFileSync } = require("child_process");
+
+const output = execFileSync("npm", ["pack", "--dry-run", "--json"], {
+  encoding: "utf8",
+  stdio: ["ignore", "pipe", "inherit"],
+});
+
+const [packument] = JSON.parse(output);
+if (!packument || !Array.isArray(packument.files)) {
+  throw new Error("npm pack did not return file metadata.");
+}
+
+const cli = packument.files.find((file) => file.path === "dist/cli.js");
+if (!cli) {
+  throw new Error("Package is missing dist/cli.js.");
+}
+
+const executableBits = cli.mode & 0o111;
+if (executableBits === 0) {
+  throw new Error(
+    `dist/cli.js is not executable in the package tarball (mode ${cli.mode.toString(8)}).`
+  );
+}