MetaScout v0.5.1

MetaScout v0.5.1

Fewer false "critical files"

A real scan flagged eight critical files on one site and all eight were wrong.

• Soft 404s. Some sites answer an unknown .txt path with their own HTML page under HTTP 200. Binary documents were already checked against their signature, but plaintext and config types have none, so that page was taken for the file. An HTML page returned for .txt, .env, .sql, .log, .conf, .ini, .yml, .bak, .csv, .json or .xml is now rejected as not the file, just like a bot-check page served for a PDF.
• Files that are public on purpose. robots.txt, security.txt, humans.txt, ads.txt, app-ads.txt, llms.txt, llms-full.txt, dnt-policy.txt, trust.txt and sitemaps are no longer critical-file candidates.

Account names from Mac PostScript fields

%%For, %%Title and %%Creator written in a Mac's legacy charset used to come out as I?ıl ?zt?rk, because exiftool's JSON can't carry non-UTF-8 bytes. MetaScout now fetches those values again as raw bytes (exiftool -b) and decodes them as Mac Turkish, falling back to Mac Roman. macOS per-user temp paths (/var/folders/…/T/TemporaryItems/…), where Illustrator stages renditions, are dropped as noise.

Visual signature check no longer needs the OCR extra

With signature-detect installed but not the OCR packages (or pypdf), both scan --visual-signature and visual-signature-scan skipped the check — the latter claiming signature-detect was not installed. The check now depends on signature-detect alone. The test suite no longer depends on which optional extras are installed.

Upgrade with metascout update.