unfurl
v20261007.0.0Verified publisherBreaks a URL into everything it encodes: timestamps, IDs, search terms, tracking and session data
Community-packaged from github.com/RyanDFIR/unfurl: the registry's community pins the upstream release; the tool is its authors' work. Maintain that project? Claim this package.
Artifact v20261007.0.0
- Wheel
dfir-unfurl 20261007from PyPI- SHA-256
cd355bd77f9014de3d703189a566f08cca6b433c8ebaf72b043a71fd16531434- Registry copy
- Wheel copy served by the registry, same hash.
Signature
- Identity
pypi:GitHub:ryandfir/unfurl/publish-to-pypi.yml- Issuer
https://pypi.org
Signed by the repository's own release workflow (cosign keyless, or a PyPI attestation for wheels). ot verifies this identity before every install and refuses a mismatch, including from the registry's mirror.
Scans
Latest run · 20 Oct 2026
- Passed
Malware and secrets
0 malware heuristics, 0 embedded secrets
- Passed
Software bill of materials
22 packages
- Passed
Signature
Signed by pypi:GitHub:ryandfir/unfurl/publish-to-pypi.yml
- Passed
Smoke test
Exit code 0 in 3.5 s, offline sandbox with the manifest's test input
- Passed
Vulnerabilities
0 critical, 0 high, 5 medium, 1 low (0 high or critical with fixes available)
Earlier run · 20 Oct 2026 · superseded by the run above
- Passed
Malware and secrets
0 malware heuristics, 0 embedded secrets
- Passed
Software bill of materials
22 packages
- Failed
Signature
Did not verify: published by GitHub:ryandfir/unfurl, not osintverse-community/unfurl
- Passed
Smoke test
Exit code 0 in 4.0 s, offline sandbox with the manifest's test input
- Passed
Vulnerabilities
0 critical, 0 high, 5 medium, 1 low (0 high or critical with fixes available)
How releases are checked: security model. Found a problem? Email security@otinstaller.com, or report this tool.