Skip to content

v1.1.0 — DeepEngine & Stable Release

Choose a tag to compare

View all tags
@sparkvibe-io sparkvibe-io released this 02 Mar 17:46
v1.1.0
ff6c458
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New

DeepEngine — Cross-Line Data Flow Analysis

  • Taint tracking from untrusted sources to dangerous sinks across multiple lines and function boundaries
  • 5-phase analysis: assignment extraction, source identification, scope-aware propagation, sink detection, finding conversion
  • Python: AST-based analysis with 19 source patterns and 12 sink patterns
  • JavaScript/TypeScript: Regex-based analysis with 10 source patterns and 10 sink patterns
  • Zero dependencies maintained — uses stdlib ast for Python, regex for JS/TS
  • Confidence scoring: 0.70–0.90 based on taint kind and chain length
  • Registered as deep engine alongside regex; enable with set_engine(engines=["regex", "deep"])

Documentation

  • Full DeepEngine coverage across all doc pages: architecture, API reference, MCP server, landing page, getting started, and FAQ
  • New comparison table row: Cross-line Analysis (17 categories)
  • Test badge updated: 1463 passing

Version

  • Promoted from 1.1.0b1 (beta) to 1.1.0 (stable)
  • PyPI classifier: Production/Stable

Stats

  • 21 MCP tools
  • 108+ detection patterns across 7 languages
  • 2 analysis engines (regex + deep)
  • 1463 tests passing
  • 0 dependencies

Install / Upgrade

pip install --upgrade guardianshield

Full Changelog: v1.1.0b1...v1.1.0

Assets 2
Loading