Detection & parsing
- PE .NET/CLR metadata (pe.clr.*): managed-binary detection independent of Authenticode — strong-name signing, module MVID, runtime/metadata versions, IL-only bits, and metadata stream inventory.
- Static libraries (.a) now identified as a distinct file type, disambiguated from .deb (both use the ! magic).
- CRX signed-but-unverified detection fixed: the canonical extension ID is now read from the CRX3 signed header, correctly handling Web Store packages that carry a publisher proof before the developer proof (previously derived the wrong ID).
- Dependency extraction for .gem (runtime deps → pkg:gem PURLs) and VSIX ( → pkg:vscode PURLs).
Reliability
- Fixed panic parsing batch (.bat) comments when a line begins with a multibyte char (e.g. CJK) — a rem check byte-sliced mid-character. (Crashed the matrixone scan.)
- Auto-clearing cache: 30-day TTL + 2 GiB ceiling, non-blocking; also sweeps stng's on-disk string cache, which nothing else prunes in a filefacts/cleave process. Fixed an eviction-target overflow on very large max_items.
Project
- Moved to GitHub (atomdrift-project/filefacts); stng dependency re-pinned. Dependency updates.