phpwarden 2.2.0__tar.gz → 2.2.1__tar.gz

{phpwarden-2.2.0 → phpwarden-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: phpwarden
-Version: 2.2.0
+Version: 2.2.1
 Summary: PHP vulnerability scanner for the PHP engine, Composer, WordPress, your own code and the live site. Ranked by real-world exploitation (CISA KEV, then EPSS), not CVSS. Offline, zero dependencies.
 Author: oroma-alfred
 License-Expression: Apache-2.0
@@ -152,8 +152,9 @@ error. Full table: `phpwarden --help`.
   how). Without that it reads the homepage and stops.
 - **`phpwarden code PATH`**: 75 rules (74 on by default) for your own PHP code, following request
   data to `eval`, shell commands, SQL, `unserialize`, includes and redirects.
-  It follows data through one level of same-file helper, not across files, and
-  does not replace PHPStan or Psalm. `phpwarden code --list-rules` lists every rule.
+  It follows data across files (helper functions and classes elsewhere in the
+  project, fixed includes, class properties); it is not a type checker like
+  PHPStan or Psalm. `phpwarden code --list-rules` lists every rule.
 - **`phpwarden assess`**: one ranked list from every view of a site: installed
   versions, your code, the live site from outside, and the access log, with the
   reason for each item ("exploited, reachable, visible from outside, already

{phpwarden-2.2.0 → phpwarden-2.2.1}/README.md

@@ -130,8 +130,9 @@ error. Full table: `phpwarden --help`.
   how). Without that it reads the homepage and stops.
 - **`phpwarden code PATH`**: 75 rules (74 on by default) for your own PHP code, following request
   data to `eval`, shell commands, SQL, `unserialize`, includes and redirects.
-  It follows data through one level of same-file helper, not across files, and
-  does not replace PHPStan or Psalm. `phpwarden code --list-rules` lists every rule.
+  It follows data across files (helper functions and classes elsewhere in the
+  project, fixed includes, class properties); it is not a type checker like
+  PHPStan or Psalm. `phpwarden code --list-rules` lists every rule.
 - **`phpwarden assess`**: one ranked list from every view of a site: installed
   versions, your code, the live site from outside, and the access log, with the
   reason for each item ("exploited, reachable, visible from outside, already

{phpwarden-2.2.0 → phpwarden-2.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "phpwarden"
-version = "2.2.0"
+version = "2.2.1"
 description = "PHP vulnerability scanner for the PHP engine, Composer, WordPress, your own code and the live site. Ranked by real-world exploitation (CISA KEV, then EPSS), not CVSS. Offline, zero dependencies."
 readme = "README.md"
 requires-python = ">=3.8"

{phpwarden-2.2.0 → phpwarden-2.2.1}/src/phpwarden/__init__.py

@@ -6,4 +6,4 @@ real-world exploitation (CISA KEV, then EPSS, then CVSS), and can watch PHP-FPM
 for active exploitation. The engine and the bundled feed are open; free users
 get weekly feed updates, and a subscription adds the feed rebuilt twice a day.
 """
-__version__ = "2.2.0"
+__version__ = "2.2.1"