crates.io / bumpalo / 3.20.3

bumpalo 3.20.3

Source

https://github.com/fitzgen/bumpalo

Artifact scanned

bumpalo-3.20.3.crate (crate · 96.4 KB · SHA-256 72f5acc6cb2b…)

Compared with

bumpalo-3.20.2.crate (0 signals introduced since)

Files

12 scanned, 8 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 5 info

Scan time

0.1 s

LLM review

LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.

Disclude version

4.3.0

Scanned (UTC)

2026-10-24 10:18

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info unicode-homoglyph src/collections/string.rs:1596:42

   identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

       ///
       /// let mut s = String::from_str_in("α is alpha, β is beta", &b);
       /// let beta_offset = s.find('β').unwrap_or(s.len());
       ///

2. info unicode-homoglyph src/collections/string.rs:1601:24

   identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

       /// let t = String::from_iter_in(s.drain(..beta_offset), &b);
       /// assert_eq!(t, "α is alpha, ");
       /// assert_eq!(s, "β is beta");
       ///

3. info unicode-homoglyph src/collections/string.rs:1665:42

   identifier `α` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)

       ///
       /// let mut s = String::from_str_in("α is alpha, β is beta", &b);
       /// let beta_offset = s.find('β').unwrap_or(s.len());
       ///

4. info unicode-homoglyph src/collections/string.rs:1669:41

   identifier `Α` contains homoglyph candidates: Α (0391)→A (in string/comment) (raw pass, confidence 0.35)

       /// // Replace the range up until the β from the string
       /// s.replace_range(..beta_offset, "Α is capital alpha; ");
       /// assert_eq!(s, "Α is capital alpha; β is beta");
       /// ```

5. info unicode-homoglyph src/collections/string.rs:1670:24

   identifier `Α` contains homoglyph candidates: Α (0391)→A (in string/comment) (raw pass, confidence 0.35)

       /// s.replace_range(..beta_offset, "Α is capital alpha; ");
       /// assert_eq!(s, "Α is capital alpha; β is beta");
       /// ```
       pub fn replace_range<R>(&mut self, range: R, replace_with: &str)

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o bumpalo-3.20.3.crate 'https://static.crates.io/crates/bumpalo/bumpalo-3%2E20%2E3.crate'
printf '%s  %s\n' 72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649 bumpalo-3.20.3.crate | shasum -a 256 -c -
mkdir pkg && tar -xzf bumpalo-3.20.3.crate -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg