crates.io / winnow / 1.0.4

winnow 1.0.4

Source
https://github.com/winnow-rs/winnow
Artifact scanned
winnow-1.0.4.crate (crate · 184.1 KB · SHA-256 23b97319f7b8…)
Compared with
winnow-1.0.3.crate (0 signals introduced since)
Files
101 scanned, 6 skipped (binary, oversized, or unrecognised)
Signals
0 critical · 0 warn · 7 info
Scan time
0.2 s
LLM review
LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.
Disclude version
4.3.0
Scanned (UTC)
2026-10-24 04:33

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

  1. info unicode-mixed-script src/ascii/tests.rs:949:18

    identifier `βèƒôřè` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)

        fn is_till_line_ending_str() {
            let f = "βèƒôřè\rÂßÇáƒƭèř";
            assert_parse!(
                till_line_ending.parse_peek(f),
  2. info unicode-mixed-script src/ascii/tests.rs:4111:18

    identifier `βèƒôřè` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)

        fn is_till_line_ending_str() {
            let f = "βèƒôřè\rÂßÇáƒƭèř";
            assert_parse!(
                till_line_ending.parse_peek(Partial::new(f)),
  3. info encoding-hex src/binary/mod.rs:284:50

    16 consecutive `\xNN` escapes (entropy 4.0 bits/byte) (in comment) (raw pass, confidence 0.39)

    ///
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x10\x11\x12\x13\x14\x15abcd"[..])), Ok((Partial::new(&b"abcd"[..]), 0x00010203040506070809101112131415)));
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x01"[..])), Err(ErrMode::Incomplete(Needed::new(15))));
    /// ```
  4. info encoding-hex src/binary/mod.rs:606:50

    16 consecutive `\xNN` escapes (entropy 4.0 bits/byte) (in comment) (raw pass, confidence 0.39)

    ///
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x10\x11\x12\x13\x14\x15abcd"[..])), Ok((Partial::new(&b"abcd"[..]), 0x00010203040506070809101112131415)));
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x01"[..])), Err(ErrMode::Incomplete(Needed::new(15))));
    /// ```
  5. info encoding-hex src/binary/mod.rs:873:50

    16 consecutive `\xNN` escapes (entropy 4.0 bits/byte) (in comment) (raw pass, confidence 0.39)

    ///
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x10\x11\x12\x13\x14\x15abcd"[..])), Ok((Partial::new(&b"abcd"[..]), 0x15141312111009080706050403020100)));
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x01"[..])), Err(ErrMode::Incomplete(Needed::new(15))));
    /// ```
  6. info encoding-hex src/binary/mod.rs:1194:50

    16 consecutive `\xNN` escapes (entropy 4.0 bits/byte) (in comment) (raw pass, confidence 0.39)

    ///
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x10\x11\x12\x13\x14\x15abcd"[..])), Ok((Partial::new(&b"abcd"[..]), 0x15141312111009080706050403020100)));
    /// assert_eq!(parser.parse_peek(Partial::new(&b"\x01"[..])), Err(ErrMode::Incomplete(Needed::new(15))));
    /// ```
  7. info unicode-mixed-script src/error.rs:1433:22

    identifier `βèƒôřè` mixes scripts: Greek + Latin (in string/comment) (raw pass, confidence 0.40)

        fn utf8() {
            let input = "βèƒôřè";
            assert_eq!(input.len(), 12);
            let cases = [

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o winnow-1.0.4.crate 'https://static.crates.io/crates/winnow/winnow-1%2E0%2E4.crate'
printf '%s  %s\n' 23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81 winnow-1.0.4.crate | shasum -a 256 -c -
mkdir pkg && tar -xzf winnow-1.0.4.crate -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg