spamscanner 7.0.10 → 7.0.11

package/dist/types/attachments.d.ts

@@ -33,6 +33,7 @@ export function zipEntries(buffer: Buffer, limit?: number): Array<{
     encrypted: boolean;
     size: number;
 }>;
+export function extensionOf(name: any): any;
 /**
  * Inspect a message's attachments.
  *

package/dist/types/entities.d.ts

@@ -0,0 +1,2 @@
+/** @type {Map<string, string>} */
+export const NAMED_REFERENCES: Map<string, string>;

package/dist/types/html.d.ts

@@ -1,7 +1,7 @@
 /**
  * Text with its character references decoded, as browsers decode them: by
- * number, also without a ";", and by name (the names of Latin-1 and those
- * mail commonly uses; also without a ";" for the names browsers read so,
+ * number, also without a ";", and by name (every name browsers know; also
+ * without a ";" for the names browsers read so,
  * except in an attribute where a letter, digit or "=" follows, as in a link
  * "?a=1&copy=2"). An unknown name stays as it is.
  * @param {string} value

package/dist/types/index.d.ts

@@ -9,6 +9,9 @@ export namespace DEFAULTS {
         let cloudflare: boolean;
         let adult: boolean;
         let maxHosts: number;
+        let attachments: boolean;
+        let timeout: any;
+        let hostsInText: boolean;
         let maxLength: number;
         let homograph: {};
     }
@@ -17,10 +20,12 @@ export namespace DEFAULTS {
         let domain: any[];
     }
     export namespace dns {
-        let servers: any;
-        let timeout: number;
+        export let servers: any;
+        let timeout_1: number;
+        export { timeout_1 as timeout };
     }
-    export let attachments: boolean;
+    let attachments_1: boolean;
+    export { attachments_1 as attachments };
     export let arbitrary: boolean;
     export let authentication: boolean;
     export let reputation: boolean;
@@ -30,8 +35,8 @@ export namespace DEFAULTS {
     export let nsfw: boolean;
     let maxLength_1: number;
     export { maxLength_1 as maxLength };
-    let timeout_1: number;
-    export { timeout_1 as timeout };
+    let timeout_2: number;
+    export { timeout_2 as timeout };
     export let session: {};
 }
 /**
@@ -141,7 +146,7 @@ export class SpamScanner {
      * @returns {Promise<ScanResult>}
      */
     scanFile(file: string, options?: ScanOptions): Promise<ScanResult>;
-    checkLinks(links: any, config: any, hosts?: any[], from?: string): Promise<{
+    checkLinks(links: any, config: any, hosts?: any[], options?: {}): Promise<{
         phishing: any[];
         homographs: any[];
         uncheckedHosts: number;
@@ -274,6 +279,9 @@ export type ScannerSettings = {
         cloudflare?: boolean;
         adult?: boolean;
         maxHosts?: number;
+        attachments?: boolean;
+        hostsInText?: boolean;
+        timeout?: number;
         maxLength?: number;
         homograph?: object;
     };
@@ -485,6 +493,14 @@ export type ScanDetails = {
      * - whether text beyond phishing.maxLength was not read for links
      */
     linksTruncated: boolean;
+    /**
+     * - whether a link host of the message or of what it carries was never read whole
+     */
+    linksTooComplex: boolean;
+    /**
+     * - whether an attachment was left unread for links, for time
+     */
+    linksIncomplete: boolean;
     idnHomographAttack: {
         detected: boolean;
         domains: ScanFinding[];
@@ -507,6 +523,10 @@ export type ScanResult = {
      * - the message parsed by mailparser
      */
     mail: object;
+    /**
+     * - its attachments and those of its attached messages (see expandAttachments)
+     */
+    attached: Array<object>;
     version: string;
     metrics: {
         totalTime: number;

package/dist/types/links.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The link hosts of a message and of what it carries, as they are looked up
+ * (see lookupName; an address as it is), in the order they are found, up to
+ * `maxHosts`; names with no "/" after them come last, as far as there is
+ * room, as text that is not a link may read as one.
+ * @param {object} mail - the message, as mailparser parsed it
+ * @param {object} [options]
+ * @param {object[]} [options.mails] - the messages attached to it, opened (see expandAttachments)
+ * @param {object[]} [options.attachments] - its attachments and theirs (see expandAttachments)
+ * @param {number} [options.maxHosts]
+ * @param {boolean} [options.hostsInText] - also names with no "/" after them, "evil.example", as mail clients make links of them
+ * @returns {{hosts: string[], more: boolean, tooComplex: boolean, incomplete: boolean}} `more`: it has more hosts, so not every link was read; `tooComplex`: a link whose host was never read whole (it runs past where the text is cut to be read, it is wrapped deeper than unwrapLink unwraps, or in more documents than are read); `incomplete`: an attachment was left unread for time
+ */
+export function carriedLinkHosts(mail: object, { mails, attachments, maxHosts, hostsInText, }?: {
+    mails?: object[];
+    attachments?: object[];
+    maxHosts?: number;
+    hostsInText?: boolean;
+}): {
+    hosts: string[];
+    more: boolean;
+    tooComplex: boolean;
+    incomplete: boolean;
+};

package/dist/types/parse.d.ts

@@ -106,7 +106,7 @@ export function parseWithin(raw: Buffer, parse?: (raw: Buffer, options: {
  * @param {(raw: Buffer) => Promise<object>} [parse] - for tests
  * @returns {Promise<Array<object>>}
  */
-export function expandAttachments(attachments?: Array<object>, errors?: string[], parse?: (raw: Buffer) => Promise<object>, unopened?: any[]): Promise<Array<object>>;
+export function expandAttachments(attachments?: Array<object>, errors?: string[], parse?: (raw: Buffer) => Promise<object>, gets?: {}): Promise<Array<object>>;
 /**
  * DKIM-Signature fields mailauth reads of a message (see boundedForAuth): it
  * checks every signature, hashing the body once for each body length (l=)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "spamscanner",
   "description": "Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP API.",
-  "version": "7.0.10",
+  "version": "7.0.11",
   "author": "Forward Email (https://forwardemail.net)",
   "bin": {
     "spamscanner": "./dist/esm/cli.js"