typosquatting 0.5.1 → 0.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f791ab61b6b1a907c25e8ecba6f3e6a2f341e07f5232125297405093e4841cef
-  data.tar.gz: 8cea179d8c952ca8b93fb42b76d060f02ec312500b1f4a2ffd2e372e2535385b
+  metadata.gz: ff5dc5582c8ebad3ac16a8b50049ad6cdd7548f997b30bda99c142b7e1d963c6
+  data.tar.gz: 6fdf68f18de9969b03882d792eefd7f202c10805b9537bb6a836d6a7801afb74
 SHA512:
-  metadata.gz: cdb27c59163382c8615a3e5783c519e578271be0d52a16beddbf8458a8cf1b62e582e8eec297f8d1cf28c67840bac27e1533cb018b59ed8df3e2af46dca1c80a
-  data.tar.gz: 5298442b1f8cafc97fa7c20b321c2cffd6d3a638a5e04b9749047c5341927259eb325e3199d056902e4741b34e51d0e25f431973e4c90841874e19b5d8ce8936
+  metadata.gz: 2bd2c78dfb4e8cf2f24215dba5c9b0530fdce251fa792e3879263f41116ea635170b7d90b90edf3fd80f488a6691369abbf4c7836131b1e991c363aa64a5c8a5
+  data.tar.gz: 9e14b81b0c28192820544920b2d135d6f3f6209ced87ef7ca2f8b02079d1d11f9632931d9464a95bb27d27a013a6b0c0fbe31e6c94c1caa03a77e86e41439ebf

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 ## [Unreleased]
 
+## [0.5.2] - 2026-01-06
+
+- Exclude removed/unpublished packages from typosquat detection (fixes false positives for reserved names)
+
 ## [0.5.1] - 2026-01-04
 
 - Filter duplicate packages in SBOM checking to avoid redundant results and API calls

data/lib/typosquatting/cli.rb

@@ -291,22 +291,24 @@ module Typosquatting
       case options[:format]
       when "json"
         data = results.map do |r|
-          {
+          hash = {
             name: r[:variant].name,
             algorithm: r[:variant].algorithm,
             exists: r[:result].exists?,
             registries: r[:result].registries
           }
+          hash[:status] = r[:result].status if r[:result].status
+          hash
         end
         puts JSON.pretty_generate(data)
       when "csv"
-        puts "name,algorithm,exists,registries"
+        puts "name,algorithm,exists,status,registries"
         results.each do |r|
-          puts "#{r[:variant].name},#{r[:variant].algorithm},#{r[:result].exists?},\"#{r[:result].registries.join("; ")}\""
+          puts "#{r[:variant].name},#{r[:variant].algorithm},#{r[:result].exists?},#{r[:result].status},\"#{r[:result].registries.join("; ")}\""
         end
       else
         results.each do |r|
-          status = r[:result].exists? ? "EXISTS" : "available"
+          status = format_status(r[:result])
           if options[:verbose]
             puts "#{r[:variant].name} (#{r[:variant].algorithm}) - #{status}"
             puts "  registries: #{r[:result].registries.join(", ")}" if r[:result].exists?
@@ -321,6 +323,14 @@ module Typosquatting
       end
     end
 
+    def format_status(result)
+      return result.status.upcase if result.status == "removed"
+      return "available" unless result.exists?
+      return result.status.upcase if result.status
+
+      "EXISTS"
+    end
+
     def output_confusion_results(results, options)
       case options[:format]
       when "json"

data/lib/typosquatting/lookup.rb

@@ -200,7 +200,13 @@ module Typosquatting
 
     Result = Struct.new(:name, :purl, :packages, :ecosystem, keyword_init: true) do
       def exists?
-        !packages.empty?
+        return false if packages.empty?
+
+        status != "removed"
+      end
+
+      def status
+        packages.map { |p| p["status"] }.compact.first
       end
 
       def registries
@@ -212,6 +218,7 @@ module Typosquatting
           name: name,
           purl: purl,
           exists: exists?,
+          status: status,
           registries: registries,
           packages: packages
         }

data/lib/typosquatting/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Typosquatting
-  VERSION = "0.5.1"
+  VERSION = "0.5.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: typosquatting
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.5.2
 platform: ruby
 authors:
 - Andrew Nesbitt