This is a maintenance release. It is functionally identical to version 1.1.1,
which was withdrawn before review; only the version number differs. One policy
recommendation (suggesting fo=1) was removed because the underlying value could
not be determined reliably from the aggregate report, and the corresponding
localized string was removed from all 12 locale files. No other functional
changes.

No new permissions are requested; the add-on continues to use messagesRead,
accountsRead and storage only. The add-on does not use innerHTML anywhere; the
DOM is built with DOM APIs, textContent, and an explicit HTML-escaping helper.

The automated linter reports "The Function constructor is eval." warnings.
These originate solely from the bundled pako/jszip minified builds, not from
the add-on's own source code. They are used only for GZIP/ZIP decompression of
report attachments. The add-on performs no network requests; all processing
happens locally inside Thunderbird. Library versions, sources, and licenses are
documented in VENDOR.md included in the package.

Version 1.1.0

• New: "Misconfigured" source classification - IP ranges that hold valid signing keys yet also deliver unauthenticated mail are now flagged separately, instead of being hidden as legitimate.
• New: Expanded policy advice covering subdomain policy (sp), SPF alignment (aspf), non-existent subdomain policy (np), and failure reporting options (fo).
• New: JSON export alongside CSV, for SIEM and scripting workflows.
• New: Live scan progress, sortable tables, click-to-copy IP ranges, and a domain quick-filter.
• Improved: More accurate aggregation - domain and global summaries are recomputed from raw records, so low-volume sources spread across many reports are no longer dropped.
• Improved: Hardened report parsing (UTF-8 BOM, invalid control characters, bare ampersands, and the Microsoft diskim typo) reduces unreadable reports; faster scans on Thunderbird 121 and later.
• Improved: Accessibility - health badges expose an accessible label and tables expose column headers to assistive technologies.

v1.0.7

• Added VENDOR.md at the extension root, documenting all bundled third-party libraries (JSZip 3.10.1, pako 2.1.0) with exact version numbers, source URLs, and licenses, in accordance with Thunderbird's Third Party Library Usage Guide.
• Updated build scripts (build.sh, build.ps1) to include VENDOR.md in the XPI package.
• Fixed incorrect pako source URL in lib/README.md (was pointing to a wrong repository).