ormsgpack 1.13.0

Source: https://github.com/ormsgpack/ormsgpack
Artifact scanned: ormsgpack-1.13.0.tar.gz (sdist · 44.4 KB · SHA-256 4127e84b0781…)
Compared with: ormsgpack-1.12.2.tar.gz (2 signals introduced since)
Files: 75 scanned, 7 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 2 info
Scan time: 0.1 s
LLM review: LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.
Disclude version: 4.3.0
Scanned (UTC): 2026-10-23 12:27

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info unicode-homoglyph src/str/mod.rs:114:18 new in this release

identifier `aα` contains homoglyph candidates: α (03B1)→a (in string/comment) (raw pass, confidence 0.35)
```
    fn test_count_chars() {
        let p = "aα∞🚀";
        #[rustfmt::skip]
        let lengths = [
```
info unicode-mixed-script src/str/mod.rs:114:18 new in this release

identifier `aα` mixes scripts: Latin + Greek (in string/comment) (raw pass, confidence 0.40)
```
    fn test_count_chars() {
        let p = "aα∞🚀";
        #[rustfmt::skip]
        let lengths = [
```

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o ormsgpack-1.13.0.tar.gz https://files.pythonhosted.org/packages/72/ae/aea2bee05bd61645daf97515174d71d8fd978a2c395b4dd5f0a5ada7facc/ormsgpack-1.13.0.tar.gz
printf '%s  %s\n' 4127e84b07816e1f36d557e95b5642041692df22bf77f2c2f563a2039ab8144e ormsgpack-1.13.0.tar.gz | shasum -a 256 -c -
mkdir pkg && tar -xzf ormsgpack-1.13.0.tar.gz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg