docs: Fix link to Tao Bojlén's npm trust article (#428)

Updated the link to Tao Bojlén's article on npm trust, link structure of the site is probably changed. Old link goes to 404.

docs: add language hint to fenced code blocks in CONTRIBUTING

docs: standardize contributing guidelines

docs: consolidate feature documentation (#423)

Keep feature docs under the singular docs/feature directory and add repo guidance for future agent work.

Co-authored-by: Cursor <cursoragent@cursor.com>

fix: remove deprecated Snyk vulnerabilities badge from README (#418)

fix: signal detection for malicious packages on osv (#416)

* fix: signal detection for malicious packages on osv

feat: new maintainer dormant signal addition to supply chain security (…

…#415)

feat: detect provenance regression, such as the axios march 2026 inci…

…dent (#414)

feat: exit code with errors when scanning finds issues (#413)

docs: add ai context (#395)