v3.0.0-beta.1

Security Notice

• Removed vulnerable & obsolete --extract-dir flag to close a path traversal flaw: GHSA-rjq9-6g6p-98qr - Kudos to @ajayk for discovery!

Features

• Expanded capability validation to cover taxonomy, scope, patterns, and oversized rules.
• Added AST timing diagnostics for validation.
• Removed obsolete server mode as part of the 3.0 beta CLI-only transition.
• Updated RAR extraction to maintained unrar-ng.

Fixes

• Standardized YARA evaluation across analyzers, archives, and unpacked UPX files so findings and inline traits propagate consistently.
• Hardened archive, LZX, and PyInstaller parsing against malformed or oversized untrusted inputs.
• Sanitized terminal output to escape control sequences and Unicode directionality controls.

Optimizations

• Accelerated rule validation with caching, AST reuse, parallel checks, regex batching, and metadata caching.