Merge pull request #96 from sonukapoor/feature/issue-95-readme-toc

[Docs] Add a multi-column README table of contents

Author: sonukapoor

README.md

@@ -5,7 +5,7 @@
 [![License](https://img.shields.io/github/license/sonukapoor/cve-lite-cli)](https://github.com/sonukapoor/cve-lite-cli/blob/main/LICENSE)
 
 <div align="center">
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/logo-with-title.png" alt="CVE Lite CLI" width="320"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/logo-with-title.png" alt="CVE Lite CLI" width="320"/>
 
   <h1>CVE Lite CLI</h1>
   <p>Fast, developer-friendly vulnerability scanning for JavaScript and TypeScript projects, with offline support for restricted environments.</p>
@@ -23,6 +23,47 @@
 
 ---
 
+## Contents
+
+<table>
+  <tr>
+    <td valign="top">
+      <strong>Overview</strong><br/>
+      <a href="#what-is-cve-lite-cli">What is CVE Lite CLI</a><br/>
+      <a href="#new-offline-advisory-db-support">Offline advisory DB support</a><br/>
+      <a href="#why-offline-mode-matters">Why offline mode matters</a><br/>
+      <a href="#what-it-looks-like">What it looks like</a><br/>
+      <a href="#why-this-tool-exists">Why this tool exists</a><br/>
+      <a href="#project-scope-and-differentiation">Project scope and differentiation</a>
+    </td>
+    <td valign="top">
+      <strong>Usage</strong><br/>
+      <a href="#quick-start">Quick start</a><br/>
+      <a href="#usage">Usage</a><br/>
+      <a href="#workflow-modes">Workflow modes</a><br/>
+      <a href="#network-behavior-and-privacy">Network behavior and privacy</a><br/>
+      <a href="#features">Features</a><br/>
+      <a href="#supported-workflows">Supported workflows</a>
+    </td>
+    <td valign="top">
+      <strong>CI and Offline</strong><br/>
+      <a href="#dependency-footprint">Dependency footprint</a><br/>
+      <a href="#example-use-cases">Example use cases</a><br/>
+      <a href="#recommended-workflow-patterns">Recommended workflow patterns</a><br/>
+      <a href="#comparison-with-other-tools">Comparison with other tools</a><br/>
+      <a href="#current-limitations">Current limitations</a><br/>
+      <a href="#positioning">Positioning</a>
+    </td>
+    <td valign="top">
+      <strong>Project</strong><br/>
+      <a href="#roadmap">Roadmap</a><br/>
+      <a href="#contributing">Contributing</a><br/>
+      <a href="#community-and-support">Community and support</a><br/>
+      <a href="#license">License</a>
+    </td>
+  </tr>
+</table>
+
 ## What is CVE Lite CLI
 
 **CVE Lite CLI** helps developers scan their projects for known package vulnerabilities without signing up for an expensive platform. It is built for the moment right before release, when you want a clear answer, a practical fix plan, and a tool you can actually afford to use.
@@ -185,16 +226,16 @@ cve-lite .
 ```
 
 <p align="center">
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/default-output.png" alt="CVE Lite CLI default output screenshot" width="900"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/default-output.png" alt="CVE Lite CLI default output screenshot" width="900"/>
 </p>
 
 Verbose examples:
 
 <p align="center">
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/verbose-output-1.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/verbose-output-2.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/verbose-output-3.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/verbose-output-4.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/verbose-output-1.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/verbose-output-2.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/verbose-output-3.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/verbose-output-4.png" alt="CVE Lite CLI verbose output screenshot" width="900"/>
 </p>
 
 ## Why this tool exists
@@ -338,7 +379,7 @@ So the practical model is: **local lockfile scan + advisory matching**. When mal
 CVE Lite CLI is designed as a **local-first, metadata-only** scanner. Unlike traditional SaaS security platforms that require code uploads or heavy agent installations, this tool operates directly within the developer's environment. It focuses on the "moment of release"—providing a high-speed, low-noise assessment of the dependency tree by analyzing resolved versions in project lockfiles.
 
 <p align="center">
-  <img src="https://github.com/sonukapoor/cve-lite-cli/blob/main/assets/diagram.png" alt="CVE Lite CLI Workflow" width="800"/>
+  <img src="https://raw.githubusercontent.com/sonukapoor/cve-lite-cli/main/assets/diagram.png" alt="CVE Lite CLI Workflow" width="800"/>
 </p>
 
 ### Workflow Specifications