@yottameta/yotta-vetter 0.1.3 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/CHANGELOG.md +7 -0
  2. package/SKILL.md +1 -1
  3. package/package.json +1 -1
  4. package/scripts/__pycache__/vetter_rules.cpython-38.pyc +0 -0
  5. package/scripts/yotta_vetter.py +2 -2
package/CHANGELOG.md CHANGED
@@ -1,5 +1,12 @@
1
1
  # 更新日志
2
2
 
3
+ ## v0.1.4 (2026-08-29)
4
+
5
+ 维护性修复（签名数据豁免）：
6
+
7
+ - 规则表豁免列表加入 `verify_rules.py`（yotta-verify 规则表）：元审检查 yotta-verify 时
8
+ 规则表自身字面量不再误报（keychain / id_rsa / DPAPI 等检测模式属签名数据）。
9
+
3
10
  ## v0.1.3 (2026-08-28)
4
11
 
5
12
  中英双语 README 对齐 + 版本统一（老张拍板「英文门面 + 中文全档」）：
package/SKILL.md CHANGED
@@ -1,6 +1,6 @@
1
1
  ---
2
2
  name: yotta-vetter
3
- version: 0.1.3
3
+ version: 0.1.4
4
4
  description: 元审 —— 安装任何技能前的安全审查协议：四阶段 checklist（来源→代码→权限→风险）+ 轻量 checker，与元安联动深度扫描。触发：安装/评估任何技能前、从市场或 GitHub 获取技能、审查他人分享的技能、任何「要装未知代码」的场景；或用户说 审查/审查技能/vetting/技能安全审查/检查技能 等。边界：checker 只做初审与报告，结论需人工确认；绝不代替最终决策。
5
5
  license: MIT
6
6
  ---
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yottameta/yotta-vetter",
3
- "version": "0.1.3",
3
+ "version": "0.1.4",
4
4
  "description": "Yuanshen (元审) — the security review protocol before installing any skill: a four-phase checklist (source → code → permissions → risk) + a lightweight checker, with deep-scan handoff to yotta-security-audit. Triggers before installing/evaluating any skill or reviewing unknown code. Boundaries: initial review & report only; human confirmation required.",
5
5
  "license": "MIT",
6
6
  "keywords": [
package/scripts/yotta_vetter.py CHANGED
@@ -48,7 +48,7 @@ _HERE = Path(__file__).resolve().parent
48
48
  sys.path.insert(0, str(_HERE))
49
49
  import vetter_rules # noqa: E402
50
50
 
51
- VERSION = "0.1.3"
51
+ VERSION = "0.1.4"
52
52
  TOOL_NAME = "yotta-vetter"
53
53
  MAX_FILE_SIZE = 1_000_000
54
54
  MAX_LINE_LEN = vetter_rules.MAX_LINE_LEN
@@ -125,7 +125,7 @@ def collect_files(root):
125
125
  try:
126
126
  if p.suffix.lower() not in TEXT_EXTENSIONS and p.name.lower() not in DOTFILE_NAMES:
127
127
  continue
128
- if p.name in ("audit_rules.py", "vetter_rules.py"):
128
+ if p.name in ("audit_rules.py", "vetter_rules.py", "verify_rules.py"):
129
129
  continue # 签名数据文件（规则表）
130
130
  if p.stat().st_size > MAX_FILE_SIZE:
131
131
  continue