v0.4.2

What's Changed

• Bump gitpython from 3.1.40 to 3.1.41 by @dependabot in #75
• Make blocklist use substrings instead of direct equality, other patches. by @quasar098 in #76
• Fix Scanner Dependency Error Messages by @swashko in #78

New Contributors

• @quasar098 made their first contribution in #76

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• Support python 3.12 without tensorflow extra by @seanpmorgan in #74

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• Modularize scanners and add results method by @seanpmorgan in #66
• Add Customizable settings for scanners by @seanpmorgan in #67
• Check *put instructions in pickle scan by @mehrinkiani in #54
• Detect multiple Lambda layers by @mehrinkiani in #61
• Add attrgetter to DEFAULT unsafe by @seanpmorgan in #70
• Update pickle global op scanner by @seanpmorgan in #69
• Remove Hugging Face Support by @mehrinkiani in #60

Dependencies

• Bump aiohttp from 3.8.5 to 3.8.6 by @dependabot in #55
• Bump werkzeug from 2.3.7 to 3.0.1 by @dependabot in #53
• Pin tensorflow-io due to missing py38 by @seanpmorgan in #71

New Contributors

• @seanpmorgan made their first contribution in #66

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Added scan for INST opcode by @mehrinkiani in #52
• Add .keras scan by @mehrinkiani in #37
• Updated Exit Codes by @swashko in #42
• Handle invalid PyTorch files by @mmaitre314 in #30
• Add -h as an option for help by @swashko in #25
• Improve support for scanning HuggingFace models. by @iamfaisalkhan in #39
• Malicious code detection in dill-based models by @mehrinkiani in #29
• Refactored statements and returns for reducing time by @thanseefpp in #27
• Test Updates by @swashko in #31
• Add badges for workflow results and pypi information by @iamfaisalkhan in #34
• Add version flag to cli options by @iamfaisalkhan in #35
• Bump gitpython from 3.1.32 to 3.1.37 by @dependabot in #48
• Bump urllib3 from 1.26.16 to 1.26.17 by @dependabot in #47
• Bump urllib3 from 1.26.17 to 1.26.18 by @dependabot in #49

New Contributors

• @thanseefpp made their first contribution in #27
• @mmaitre314 made their first contribution in #30
• @dependabot made their first contribution in #48

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• Readme URLs by @cherbel in #15
• Disable --url cli option by @swashko in #16
• Bump python max version supported to 3.12 by @iamfaisalkhan in #17
• Add tests by @swashko in #11
• Readme refactor by @chrisking in #19
• updated urls for absolute paths by @chrisking in #22
• Update documentation by @mehrinkiani in #13
• Model Serialization Attack Explainer by @badarahmed in #23
• Add example notebooks by @mehrinkiani in #14
• Fix link for explainer doc by @badarahmed in #24

New Contributors

• @iamfaisalkhan made their first contribution in #17
• @chrisking made their first contribution in #19
• @mehrinkiani made their first contribution in #13
• @badarahmed made their first contribution in #23

Full Changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• Issue Templates and Security Policy by @cherbel in #2
• Fix Issues Initialization by @swashko in #3
• Bug - Reading Zip From Huggingface by @cherbel in #4
• _is_zipfile Fix by @swashko in #10
• Removing False Positives by @mehrinkiani in #12

New Contributors

• @mehrinkiani made their first contribution in #12
• @cherbel made their first contribution in #2
• @swashko made their first contribution in #3

Full Changelog: v0.1.0...v0.1.1

v0.1.0

The modelscan package is now open source under the Apache 2.0 license! Use modelscan to scan pickle, h5, and saved model file formats for potentially malicious code.