disarm 0.17.2-aarch64-linux → 0.19.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6b272d5f6d1d04facd6e0799badd0e45611437f933ea0c1c5c3ab15f57a6b9c
-  data.tar.gz: c55d1928a81a21870b7152cafcbf364ffbf9f80872a100b26cb3dfc3f3a11d45
+  metadata.gz: 96d46c601be9b39803a023d808c01f64e03a0c9dee8bcd2c3309e3bbb881e948
+  data.tar.gz: 5d6ef358fcd1f027ec4d5d36846d9bd5e586cb037348fa6cf1f3b984da583a62
 SHA512:
-  metadata.gz: b785345089c2bcbfb9b83ced9b02108b04dc7911b65e535bb51e73facc133bb252fc69ba602e7cc9356bf5c38e41c07730644e77c4d0d637781ba25a2bc1f08e
-  data.tar.gz: 67c55f33eff752f93ce65161e77d87a4cf40b3a6df82d3e64ff28e390d6b2b32d3a5816f0454ce54f892231ce980e0a7e13becb3f31f66300e9da1f2a5a15367
+  metadata.gz: ef36eb0b173472f7d80f0e3cb358647d599a8dc75a8e4fab69f81ddcad6094884a3619cec26264dae336bfed9ed81bd62822b369fc7d217de4fbc18813faff55
+  data.tar.gz: 6d6705d599e3d60d47802534c2d65757380bddb63f136659aaced9309a07ce49d80cc81d4fd9bf80416fa0be71b51266d5ae9193427b966ebdf5d49614723251

data/NOTICE

@@ -0,0 +1,89 @@
+disarm
+Copyright (c) 2026 Richard Quinn
+Licensed under the MIT License; see LICENSE.
+
+disarm includes data adapted from the following works, which remain under
+their own licences.
+
+confusable-vision
+  (c) 2026 Paul Wood FRSA (@paultendo)
+  https://github.com/paultendo/confusable-vision
+  Data licensed under the Creative Commons Attribution 4.0 International
+  License (CC-BY-4.0): https://creativecommons.org/licenses/by/4.0/
+  The data is provided as-is; see the licence for its disclaimer of warranties.
+
+  Used:
+    data/output/confusable-weights-v2.json (v2026-03-02)
+    data/output/candidate-discoveries.json (2026-02-27 revision)
+    data/output/m2b-verification-report.json (2026-02-27 revision)
+
+  Changed: disarm selects confusable pairs from those files by the admission
+  rules stated in data/confusables_supplement.tsv and
+  data/confusables_vision.tsv, and folds the selected pairs into its confusable
+  tables (src/tables/data/confusables_to_latin.tsv and
+  src/tables/data/confusables_to_cyrillic.tsv). Those tables are compiled into
+  every disarm package. The measurements themselves are not redistributed.
+  The author does not endorse disarm by this credit.
+
+Unicode data
+  Copyright © 1991-2025 Unicode, Inc.
+  https://www.unicode.org/
+  Licensed under the Unicode License v3 (SPDX: Unicode-3.0), reproduced below.
+
+  Used:
+    the Unicode Character Database (UCD): Scripts.txt (vendored as
+      data/Scripts.txt), CaseFolding.txt, DerivedCoreProperties.txt and
+      emoji/emoji-data.txt, and the character properties (General_Category,
+      East_Asian_Width, Bidi_Class, Numeric_Type and others) read through
+      Python's unicodedata module
+    Unicode Security Mechanisms (UTS #39): confusables.txt (vendored as
+      data/confusables.txt)
+    The Ideographic Variation Database (IVD): IVD_Sequences.txt
+    Unicode CLDR emoji annotations: common/annotations/en.xml and
+      common/annotationsDerived/en.xml (vendored as data/cldr/en.xml and
+      data/cldr/en_derived.xml)
+    The version of each, per table, is listed in docs/provenance.md.
+
+  Changed: disarm's generators (scripts/gen_*.py) read these files and write
+  the lookup tables under src/tables/, folding, filtering and re-keying them;
+  the tables are compiled into every disarm package.
+
+  UNICODE LICENSE V3
+
+  COPYRIGHT AND PERMISSION NOTICE
+
+  Copyright © 1991-2025 Unicode, Inc.
+
+  NOTICE TO USER: Carefully read the following legal agreement. BY
+  DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
+  SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
+  TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
+  DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.
+
+  Permission is hereby granted, free of charge, to any person obtaining a
+  copy of data files and any associated documentation (the "Data Files") or
+  software and any associated documentation (the "Software") to deal in the
+  Data Files or Software without restriction, including without limitation
+  the rights to use, copy, modify, merge, publish, distribute, and/or sell
+  copies of the Data Files or Software, and to permit persons to whom the
+  Data Files or Software are furnished to do so, provided that either (a)
+  this copyright and permission notice appear with all copies of the Data
+  Files or Software, or (b) this copyright and permission notice appear in
+  associated Documentation.
+
+  THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+  KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
+  THIRD PARTY RIGHTS.
+
+  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
+  BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
+  OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+  WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+  ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
+  FILES OR SOFTWARE.
+
+  Except as contained in this notice, the name of a copyright holder shall
+  not be used in advertising or otherwise to promote the sale, use or other
+  dealings in these Data Files or Software without prior written
+  authorization of the copyright holder.

data/lib/disarm/version.rb

@@ -2,5 +2,5 @@
 
 module Disarm
   # Kept in lockstep with the Rust crate / Python package version.
-  VERSION = "0.17.2"
+  VERSION = "0.19.0"
 end

data/lib/disarm.rb

@@ -633,6 +633,14 @@ module Disarm
       end
     end
 
+    # The level a finding of this kind carries, by the name a report holds: "error" or
+    # "warning", which are SARIF's names. `smuggled` is the one "error", because it fires
+    # only on a run that decodes to readable text. Raises Disarm::InvalidArgument on a
+    # name that is no kind.
+    def anomaly_severity(kind)
+      translate_errors { _anomaly_severity(kind.to_s) }
+    end
+
     # Full anomaly analysis: a hash with `:anomalous`, `:kinds` (in first-appearance
     # order), `:findings` (each `{ kind:, token:, start:, end:, detail:, reason: }`,
     # with byte offsets), and `:reason` (the first finding's reason, or nil).

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: disarm
 version: !ruby/object:Gem::Version
-  version: 0.17.2
+  version: 0.19.0
 platform: aarch64-linux
 authors:
 - Richard Quinn
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-09-26 00:00:00.000000000 Z
+date: 2026-11-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -93,6 +93,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - LICENSE
+- NOTICE
 - README.md
 - lib/disarm.rb
 - lib/disarm/3.3/disarm.so