release: v1.33.0

[sonukapoor]

v1.33.0

Added

• EPSS Priority Signal: combines CVSS severity with EPSS exploitation likelihood percentile into four actionable tiers - fix_now (high impact + top 10% EPSS), fix_soon (high impact), monitor (lower severity + top 10% EPSS), low_priority (all else). Surfaces as an EPSS Priority column in the verbose terminal table, a prioritySignal field in JSON output, and a column plus four-tier legend in the HTML report. Null when no EPSS data is available (feat: add EPSS Priority Signal (severity x exploitation likelihood) #1067, closes feat: add EPSS Priority Signal (severity x exploitation likelihood) #1066)

Fixed

• Scan header now counts unique packages (by name@version) rather than advisory rows; the same package appearing under multiple advisory sources was previously counted twice (feat: add EPSS Priority Signal (severity x exploitation likelihood) #1067)

Validation

• npm test
• npm run build

Closes #1066