Skip to content

v2.0.1

Choose a tag to compare

View all tags
@ErickShepherd ErickShepherd released this 09 Jul 23:54
· 207 commits to main since this release
v2.0.1
932dadf

Catches the PyPI release up to master — bundles the 2026-07-09 audit remediation with the discoverability docs.

Security

  • Cap attacker-declared allocation sizes so a crafted/corrupt granule can't exhaust memory (new limits.py)
  • Reject non-finite/non-positive HDF-EOS metadata; guard GCTP projection parameters — fail loud rather than compute wrong geolocation
  • Bound the ODL/StructMetadata parser against pathological input

Fixed

  • Auto-derived destinations refuse to clobber existing files; symlinked sources resolved before in-place replace
  • HDF4 name-collision hardening; StructMetadata part ordering; CLI worklist de-duplication

Changed / Added

  • "Problems this solves" README section; conversion-led description; broadened keywords; trove classifiers
  • conda-forge install path

No on-disk format change; the only behavior changes are defensive. See CHANGELOG.md.

Assets 2
Loading