Fix: The settings page no longer shows “Configuration incomplete” after saving valid settings with the (optional) WPScan API Token left empty — the completeness notice now reflects the just-saved state.
Fix: Public plugins/themes hosted on wordpress.org are no longer mislabelled as private. Public/private is now determined from wordpress.org directory membership (via WP’s own update transient) instead of the presence of a PluginURI header or a WPScan entry — a public plugin can lack both.
Change: The inventory payload now reports confirmed-public slugs in a new public_packages field so the server can display them with their public registry information.
1.0.1
Fix: WPScan requests now pause until the next day (site timezone) after hitting the 429 rate limit, instead of retrying every remaining slug in the same run.
Change: The Push Interval field is now hidden when Schedule Mode is set to WP-CLI only (it doesn’t apply to that mode).
Change: Renamed the WP-CLI command from wp inventory push to wp kistn push.
Change: Added an example placeholder to the API Base URL field.
Docs: Documented WordPress-plugin-repository installation as the primary install method.
Change: The server-crontab hint under Settings → Kistn now toggles live when Schedule Mode is switched, instead of only appearing after a save.
Docs: Documented Composer installation option (composer require kistn/wp-client) in README.md and readme.txt.
