node2shell-check v1.0.0

Release of node2shell-check 1.0.0 from commit eb4e2b061269bb83f51416d0d538c5b7a20c2578.

Downloads

• node2shell-check-1.0.0-source.zip contains the complete tracked source, documentation, examples, tests and license files.
• Standalone files: node2shell_check.py, collect-runtime.cjs.
• RELEASE_MANIFEST.json records source identity and artifact hashes; SHA256SUMS covers every attached file except itself.
• Retain the included licensing and brand terms. Verify download hashes before use and read the packaged README for supported usage.

Scope

• First tool release for the standalone Node2Shell checker: explicit version and inventory assessment, optional passive website metadata, CSV/JSON/HTML reports.
• Includes optional metadata collectors, build/capability inspection tools, and authenticated rule verification tooling in the complete source archive.
• Existing rules-v1-* tags, assets, and signatures remain unchanged. Rule publication is manual-only and marks rule releases latest=false; no default latest-release lookup was found in checker or signed-rule tools.
• Reported versions and configuration are evidence; potentially_affected is not confirmed exploitability, fixed_version_reported is not a safety guarantee, and exploitability remains not_tested.
• Use Python 3.10 or newer. No runtime dependency installation is required for the standalone entry point.

These artifacts do not add exploitation or deployed-patch attestation. Optional integrations must still follow their documented authorization and safety controls.

Authenticated Node2Shell rules 4.1

Existing embedded snapshot, keylessly signed by the pinned main-branch publishing workflow. Verify publisher identity, expiry and durable sequence state before use. No automatic checker update or safety attestation.

Authenticated Node2Shell rules 3.1

Existing embedded snapshot, keylessly signed by the pinned main-branch publishing workflow. Verify publisher identity, expiry and durable sequence state before use. No automatic checker update or safety attestation.

Authenticated Node2Shell rules 2.1

Existing embedded snapshot, keylessly signed by the pinned main-branch publishing workflow. Verify publisher identity, expiry and durable sequence state before use. No automatic checker update or safety attestation.

Authenticated Node2Shell rules 1.1

Existing embedded snapshot, keylessly signed by the pinned main-branch publishing workflow. Verify publisher identity, expiry and durable sequence state before use. No automatic checker update or safety attestation.