Skip to content

v2.2.0

Choose a tag to compare

View all tags
@tstromberg tstromberg released this 24 Jul 05:16
v2.2.0
2577805

Features

  • New filetype recognition so rules can target WASM, Android DEX, CAB, and APK.
  • Local reference graphs linking files to their package/provenance origins (new reference_graph type).
  • Richer package registry lookups, with registry records grafted into analysis output.
  • New crit: exception composite rules for clearer intent signalling for trait authors.
  • Facts now carry metric spans (byte ranges) pinpointing where each measurement's evidence lives.
  • Tiny output gains component-level line detail and a top-5 files summary.

Fixes

  • Fixed YARA cold-bucket and init deadlocks; stopped clearing the YARA cache unnecessarily.
  • Fixed base64/XOR false positives in SVG files; added XOR source-detection test fixtures.
  • Loosened IP-address and metrics validation to reduce false positives.
  • Description-length requirements now also apply to composite rules.

Performance

  • Non-blocking cache cleanup.
Assets 2
Loading