Skip to content

v1.11.0 — supply-chain and blockchain methods, batch checks

Choose a tag to compare

View all tags
@presendapp presendapp released this 25 Sep 20:53
· 4 commits to main since this release
v1.11.0
b8b2baf

New methods (9 endpoints that had no client method yet): maintainerChangeCheck, supplyChainCheck, addressRisk, txDecode, rpcCheck, cveLookup, ibanValidate, vatValidate, linkMetadata.

Batch methods: typosquatCheckBatch(ecosystem, packages[]) and maintainerChangeCheckBatch(packages[]), split automatically into requests of 100 and 20; each request counts once toward the rate limit.

API behavior changes worth knowing (server side, apply to all versions):

  • typosquat-check: the edit-distance threshold now scales with name length, so very common short names like ms or qs are no longer flagged.
  • maintainer-change-check: only flags a previously unseen human publisher taking over within the last 365 days; CI/trusted-publishing and pre-release transitions are reported separately. It matches the event-stream pattern and does not detect a hijacked existing account.
  • ip-reputation: IPv6 support; responses include the list date and source attribution.

Also includes the updated package description and keywords from 1.10.1/1.10.2, which were never published.

Assets 2
Loading