Skip to content

0.2.0

Latest
Latest

Choose a tag to compare

View all tags
@Lu-ITC Lu-ITC released this 22 Oct 04:22
· 1 commit to main since this release
v0.2.0
de51573
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Reject exponent-overflow JSON numbers such as 1e999 and -1e999 with EvidenceError, matching the documented finite-number rule.
  • New optional byte budgets: max_file_bytes / max_total_bytes (library, keyword-only) and --max-file-bytes / --max-total-bytes (CLI, create and verify). Oversized files are refused before reading, growth past a limit is detected with at most one extra byte read, and the total budget counts every byte read in one call. Exceeding a budget is the new resource_limit issue (exit 1). Defaults are unchanged: no limit.
  • Human output now also says matching hashes do not prove authenticity or authorization.
  • Restore the documented pull-request Python/platform matrix; README distinguishes configured jobs from executed verification.
  • PyPI metadata (keywords, classifiers, homepage and changelog URLs), README pitch, badge placeholders and install-from-PyPI note.
  • A root or manifest path containing a NUL character is an EvidenceError (a file_unavailable issue during verification) instead of a raw ValueError.
  • Files are read unbuffered, so a byte budget bounds the bytes actually read from the file (at most one extra byte to detect growth); a buffered reader could prefetch thousands of bytes from a growing file (independent re-audit DEC-R1). The manifest is read in a loop up to its 1 MiB limit.
  • A root or manifest path that is not a string or path-like object raises EvidenceError instead of TypeError.
  • README: no version number (it said 0.1.0 for the 0.2.0rc1 candidate) and the published release is described as existing, not future (DEC-R2).
  • Local verification of the 0.2.0rc1 candidate (2026-10-16): CPython 3.10, 3.11, 3.12 and 3.14 on macOS (arm64), from source and from the built wheel. Python 3.13, Linux, Windows and the non-descriptor fallback path were not run; no hosted CI run exists for it.

PyPI: https://pypi.org/project/delivery-evidence-check/0.2.0/
6230ef50bfe137dfd4434217ce74dab9689409a8731e9f11ce12c4d72da0ba78 delivery_evidence_check-0.2.0-py3-none-any.whl
457835d4243270e6d2dd2cabe822dfc19e431451e499a5497025b3234a03c0b2 delivery_evidence_check-0.2.0.tar.gz

Assets 4
Loading