cobolwork 0.3.0

cobolwork 0.3.0: precision, and where data goes.

Install: npm install -g @portll/cobolwork or pip install cobolwork; either gives the command cobolwork. The PyPI package runs the same files with the Node.js on your PATH, which must now be Node 22 or later. The npm package is attached here as cobolwork-0.3.0.tgz to pin, and as cobolwork.tgz.

What 0.3.0 adds over 0.2.x, all measured on 500 random and 500 recently active repositories:

• Subscript and length findings without the false positives where a loop exit, a constant or a check keeps the index inside its table or field. A backward scan under a not-blank test stops at 1 or more. A reference modification is judged on its last byte. A length that varies beside a varying start is judged together with the start, so X(J:K) with J and K each checked on its own is reported. A bound through another field's interval counts, and so does a counter that a performed paragraph raises only under a test that leaves room.
• The HIGH rules that block most builds, audited for precision. A COMMAREA length check counts only where EIBCALEN bounds the read. An IF that ends the run before a dynamic CALL stays an allow-list across a loop.
• Where data goes: a TSO batch step's ALLOCATE, CALL and DSN RUN, FTP GET and SITE, and IDCAMS PRINT and ALTER NEWNAME.
• ironwork diagnostics read by their codes, IBM's reserved words by column, SLSA build provenance on each release's files, and the GitHub Action proven on GitHub-hosted runners.
• Since 0.2.150: a directory a drive fails to list is retried, then counted as unread rather than read as absent.

Index findings still open are listed in BACKLOG.md under "Index findings the check model still cannot settle".

The package's lib/revision.json names the commit it was built from, b242a38.

cobolwork 0.2.150

cobolwork 0.2.150.

Install: npm install -g @portll/cobolwork or pip install cobolwork; either gives the command cobolwork. The PyPI package runs the same files with the Node.js on your PATH. The npm package is attached here as cobolwork-0.2.150.tgz to pin, and as cobolwork.tgz.

Since 0.2.140: scan --pds-export reads a directory of PDS members as a source tree, diff reads both revisions out of git without writing them to disk, every rule maps to a COBIT 2019 practice by identifier, and a finding says whether the estate's runs entered its paragraph. An index bounded through another field's interval is credited, an EIBCALEN test counts only where it bounds the read, and a check holds across a loop that calls through the checked name. Evidence verifies ironwork's step and sink records. The SBOM keeps both twins of a duplicated PROGRAM-ID, and SLSA provenance redacts compiler values.

The package's lib/revision.json names the commit it was built from, f599539.

cobolwork 0.2.140

cobolwork 0.2.140.

Install: npm install -g @portll/cobolwork or pip install cobolwork; either gives the command cobolwork. The PyPI package runs the same files with the Node.js on your PATH. The npm package is attached here as cobolwork-0.2.140.tgz to pin, and as cobolwork.tgz.

Since 0.2.117: a reference modification is judged on its last byte, UNSTRING writes the fields its DELIMITER IN, COUNT IN and TALLYING IN phrases name, a backward scan under a not-blank test stops at 1 or more, code past column 72 among column-7 comments is read as variable format, and the SBOM links what jobs run and what CICS transfers to; with the equivalence statement, gcobol options, IDCAMS PRINT and ALTER NEWNAME, the remediation gate's caller, the GitHub Action proof and planted-flaw labels already on main.

The package's lib/revision.json names the commit it was built from, 54c9654.

cobolwork 0.2.117

cobolwork 0.2.117.

Install: npm install -g @portll/cobolwork or pip install cobolwork; either gives the command cobolwork. The PyPI package runs the same files with the Node.js on your PATH. The npm package is attached here as cobolwork-0.2.117.tgz to pin, and as cobolwork.tgz.

The package's lib/revision.json names the commit it was built from, b144074.

cobolwork 0.2.76

cobolwork 0.2.76.

Install: npm install -g @portll/cobolwork or pip install cobolwork; either gives the command cobolwork. The PyPI package runs the same files with the Node.js on your PATH. The npm package is attached here as cobolwork-0.2.76.tgz to pin, and as cobolwork.tgz.

The package's lib/revision.json names the commit it was built from, 13889f6.

cobolwork 0.2.75

cobolwork 0.2.75, published to npm as @portll/cobolwork.

Install: npm install -g @portll/cobolwork. The command is cobolwork. The same package is attached here as cobolwork-0.2.75.tgz to pin, and as cobolwork.tgz.

The package's lib/revision.json names the commit it was built from, b74e3ba.

cobolwork 0.2.74

cobolwork 0.2.74.

Install: npm install -g https://github.com/Portll/cobolwork/releases/latest/download/cobolwork.tgz, or pin cobolwork-0.2.74.tgz from this release.

The package's lib/revision.json names the commit it was built from, 9dfb28c. It now carries LICENSING.md and THIRD-PARTY-NOTICES.md.

cobolwork 0.2.65

cobolwork 0.2.65, the first release from the public repository.

Install: npm install -g https://github.com/Portll/cobolwork/releases/download/v0.2.65/cobolwork-0.2.65.tgz

The package's lib/revision.json names the commit it was built from, 9826a61.