Same version
You keep the package you already run. Its API does not change.
Patched packages
Patched packages,with no forced upgrade.
A scanner says update. There is no new version, and there may never be one. Suricode builds a patched copy of the version you already run.
A CVE with no upgrade stays open.
Most of your app runs on community packages, kept up by volunteers in their spare time. A fix can take weeks. Sometimes the maintainer moves on, and the new version never comes. The hole stays open, or you jump a major release and hope nothing breaks.
You keep the version you already run.
No waiting
The hole is closed whether the maintainer is slow, busy, or gone for good.
No forced upgrade
No jumping a major version and hoping the rest of the app still builds.
Your agent installs it like any other fix.
You get a patched build of the version you already run. Same package, same API, hole closed. Suricode only reads your code. Your coding agent makes the change, including installing the patched package.
The first check is free.
Sign in with your email. No password, nothing to install.