2 releases 4 tags

RSS feed

• v1.2.1 c75211e099

  Compare

  security-txt-auditor v1.2.1 Stable

  Ghost released this 2026-10-17 01:50:10 -07:00 | 13 commits to main since this release

  • robots.txt groups follow RFC 9309: User-agent: * followed by another User-agent: line and Disallow: / blocks every crawler and is now flagged (only the last agent of a group was considered).
  • Expires: is parsed with the RFC 3339 grammar on every Python version: Python 3.11+ used to accept non-RFC 3339 forms (20270101T000000Z, a space instead of T) and older versions rejected valid ones (.5Z fractions).
  • Tests: accuracy suite (clean real-world-style files incl. signed/CRLF/offsets, 19 known-bad cases, Expires grammar table, 200 random robots.txt files against urllib.robotparser), mutation testing (nightly), claims ledger.

  Install

  pipx install git+https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor.git@v1.2.1
  # or the wheel attached to this release:
  pipx install https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.1/security_txt_auditor-1.2.1-py3-none-any.whl
  # or the single file (stdlib-only Python 3):
  curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.1/security_txt_auditor.py
  

  SHA-256

  a85e100cfd9b0b68685469251c9ccc35fe7360bccb513b49857ec34923608a45  security_txt_auditor.py
  9aa3946c9054b745a96e2c678ea6408475200b93715746e2d214245574c546a1  security_txt_auditor-1.2.1-py3-none-any.whl
  a5d1cc6c5e2e817871dcd1033dfb45e7143292f4b45ff851785464b7b262449c  security_txt_auditor-1.2.1.tar.gz
  

  Downloads

  • security_txt_auditor-1.2.1-py3-none-any.whl
    32 downloads · 2026-10-17 03:23:20 -07:00 · 8.7 KiB
  • security_txt_auditor-1.2.1.tar.gz
    31 downloads · 2026-10-17 03:23:20 -07:00 · 20 KiB
  • security_txt_auditor.py
    30 downloads · 2026-10-17 03:23:19 -07:00 · 14 KiB
  • SHA256SUMS
    29 downloads · 2026-10-17 03:23:20 -07:00 · 300 B

  ---

  • Source code (ZIP)
    10 downloads
  • Source code (TAR.GZ)
    13 downloads
• v1.2.0 0052a6dcf4

  Compare

  security-txt-auditor v1.2.0 Stable

  Ghost released this 2026-10-16 19:57:43 -07:00 | 21 commits to main since this release

  • --json output and a real CI gate: exit 1 when a finding is at or above --fail-on
    (default warn), 2 when a target can't be reached. It used to exit 0 on every run.
  • A missing security.txt is now a WARN (was INFO).
  • New RFC 9116 checks: Content-Type must be text/plain (charset note), Expires more than a year out
    or repeated, Canonical missing or not matching the served URL, http:// or unreachable
    Policy/Encryption/Acknowledgments/Hiring/Canonical links (--no-url-checks to skip), OpenPGP cleartext
    signatures detected and the signed body parsed, unknown fields reported.
  • robots.txt: Disallow: / is only flagged when it applies to every crawler (User-agent: *).
  • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor.git
    puts a security-txt-auditor command on PATH (pyproject.toml, MIT license metadata).
  • --version flag.
  • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
  • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
  • CI installs the package with pip in a clean venv and checks --version/--help on every push.

  Install

  pipx install git+https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor.git@v1.2.0
  # or the wheel attached to this release:
  pipx install https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.0/security_txt_auditor-1.2.0-py3-none-any.whl
  # or the single file (stdlib-only Python 3):
  curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.0/security_txt_auditor.py
  

  SHA-256

  c62b20573371e029269fd453c374fc5595d9ebdc0b08182ab799a48c1c5e4ef8  security_txt_auditor.py
  44741bdedcf7b4f0b09143d6bd32da6dfa68815ff867b4fe2291b1d85bf06219  security_txt_auditor-1.2.0-py3-none-any.whl
  9d1256edb28fe14470a9c2b3699db04a6bc4931e235cb7c4f7eae26d01c6a5d7  security_txt_auditor-1.2.0.tar.gz
  

  Downloads

  • security_txt_auditor-1.2.0-py3-none-any.whl
    6 downloads · 2026-10-16 19:58:14 -07:00 · 8.4 KiB
  • security_txt_auditor-1.2.0.tar.gz
    5 downloads · 2026-10-16 19:58:14 -07:00 · 11 KiB
  • security_txt_auditor.py
    5 downloads · 2026-10-16 19:58:13 -07:00 · 13 KiB
  • SHA256SUMS
    5 downloads · 2026-10-16 19:58:15 -07:00 · 300 B

  ---

  • Source code (ZIP)
    4 downloads
  • Source code (TAR.GZ)
    7 downloads