spamscanner 7.0.6 → 7.0.8

package/dist/types/dnsbl.d.ts

@@ -1,4 +1,19 @@
 export function isLookupName(name: any): boolean;
+/**
+ * The name a link host is looked up as. The URL parser keeps characters no
+ * host name has ("!", ",", "{", "~" and more, also from "%2C") and empty or
+ * long labels; such a name cannot be looked up, but Cloudflare's resolvers
+ * block a name by its parent domains too (and so would a mail client's
+ * resolver), so it is looked up as its longest suffix of labels that can be,
+ * at most 253 characters: "x!y.evil.example" as "evil.example". Dots it ends
+ * with, however many, are left out ("evil.example..." is evil.example), and
+ * a name in Unicode is looked up in ASCII. Null when that leaves no label, or
+ * only a public suffix ("com", "co.uk", "github.io"), and for an address.
+ * In linear time.
+ * @param {string} host
+ * @returns {string|null}
+ */
+export function lookupName(host: string): string | null;
 /**
  * An IP address as blocklists and allowlists know it: without an IPv6 zone
  * ("fe80::1%eth0"), and an IPv4 address mapped into IPv6 ("::ffff:192.0.2.1",
@@ -120,9 +135,10 @@ export class DnsChecker {
         answers: string[];
     }>>;
     /**
-     * Ask Cloudflare's filtering resolvers about host names. A name blocked by
-     * the malware resolver is "malware"; one blocked only by the family
-     * resolver is "adult". The hosts that got no answer (from the malware
+     * Ask Cloudflare's filtering resolvers about host names, each by the name
+     * it is looked up as (see lookupName), once; the findings name it. A name
+     * blocked by the malware resolver is "malware"; one blocked only by the
+     * family resolver is "adult". The hosts that got no answer (from the malware
      * resolver, or from the family resolver when asked) are listed in the
      * result's (non-enumerable) `unanswered` property.
      * @param {string[]} hosts

package/dist/types/index.d.ts

@@ -72,13 +72,16 @@ export class SpamScanner {
      * a header field ("Name: value", or an mbox "From " line) is read as the
      * body of a message with no header, so its text is the input; other
      * input mailparser cannot read gives a message with no text. Other errors
-     * are thrown.
+     * are thrown. `error` is the parser's limit the message exceeds, so that
+     * only its first parts were read (as scan() reports it, see parseError),
+     * or null.
      * @param {Buffer|string|Uint8Array|AsyncIterable} source
-     * @returns {Promise<{raw: Buffer, mail: object}>}
+     * @returns {Promise<{raw: Buffer, mail: object, error: string|null}>}
      */
     parse(source: Buffer | string | Uint8Array | AsyncIterable<any>): Promise<{
         raw: Buffer;
         mail: object;
+        error: string | null;
     }>;
     /**
      * Classifier features of a parsed message.
@@ -471,6 +474,13 @@ export type ScanDetails = {
         filename: string;
         reason: string;
     }>;
+    /**
+     * - attached messages not opened, past the limits attached messages are read within (nested more than 3 deep, more than 100 attachments in them, or more than 25 MB of them), whose attachments were not inspected: not scored, as forwarded messages can be nested so
+     */
+    unopenedAttachments: Array<{
+        filename: string;
+        reason: string;
+    }>;
     /**
      * - whether text beyond phishing.maxLength was not read for links
      */
@@ -509,7 +519,7 @@ import { ReputationChecker } from './reputation.js';
 import { LLMClassifier } from './llm.js';
 import { Buffer } from 'node:buffer';
 import { getFeatures } from './tokenizer.js';
-export { getFeatures, segmentWords } from "./tokenizer.js";
+export { getFeatures, segmentWords, unwrapLink } from "./tokenizer.js";
 export { LLMClassifier, PROVIDERS } from "./llm.js";
 export { DEFAULT_SCORES, scoreResults } from "./score.js";
 export { spamHeaders, rewriteMessage } from "./headers.js";

package/dist/types/parse.d.ts

@@ -95,7 +95,7 @@ export function parseWithin(raw: Buffer, parse?: (raw: Buffer, options: {
  * @param {(raw: Buffer) => Promise<object>} [parse] - for tests
  * @returns {Promise<Array<object>>}
  */
-export function expandAttachments(attachments?: Array<object>, errors?: string[], parse?: (raw: Buffer) => Promise<object>): Promise<Array<object>>;
+export function expandAttachments(attachments?: Array<object>, errors?: string[], parse?: (raw: Buffer) => Promise<object>, unopened?: any[]): Promise<Array<object>>;
 /**
  * DKIM-Signature fields mailauth reads of a message (see boundedForAuth): it
  * checks every signature, hashing the body once for each body length (l=)

package/dist/types/tokenizer.d.ts

@@ -94,8 +94,9 @@ export function obfuscationOf(text: string, options?: {
  * @returns {string}
  */
 export function registrableDomain(host: string): string;
-export function extractLinks(text: any, html: any, { maxLength }?: {
+export function extractLinks(text: any, html: any, { maxLength, bareHosts }?: {
     maxLength?: number;
+    bareHosts?: boolean;
 }): any[];
 /**
  * The value of the first href attribute of a tag ("<a ...>"), or null:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "spamscanner",
   "description": "Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP API.",
-  "version": "7.0.6",
+  "version": "7.0.8",
   "author": "Forward Email (https://forwardemail.net)",
   "bin": {
     "spamscanner": "./dist/esm/cli.js"