Problem
--header "Authorization" (no colon) is silently dropped and the audit runs unauthenticated, likely producing misleading results.
Where
src/cli.ts (collectHeaders: indexOf(":") check drops the value).
Acceptance
Add a failing test first asserting a header without a colon throws or warns instead of returning {}. Then fix.
Problem
--header "Authorization"(no colon) is silently dropped and the audit runs unauthenticated, likely producing misleading results.Where
src/cli.ts(collectHeaders:indexOf(":")check drops the value).Acceptance
Add a failing test first asserting a header without a colon throws or warns instead of returning
{}. Then fix.