internal/

Package dnsx resolves subdomain candidates against a bundled resolver pool before anything is probed over http, so the slow/inaccurate path of HTTP-ing every wordlist entry through the OS resolver is gone.

Package finding is the one normalization layer between the scan results and the consumers that don't want to know about ~two dozen result structs: notify (later) gates and renders on it, diff (later) keys runs off it.

Package fingerprint holds small response-fingerprinting primitives shared by the scan checks and the module engine, so both compute identical values.

Package httpx is the shared http layer every scanner talks through, so a single Configure call wires proxy, custom headers, cookies and rate limiting into every outbound request without touching scanner signatures.

Package modules provides the module system infrastructure for SIF.

Package notify ships findings to chat/webhook sinks (slack, discord, telegram, generic webhook) so a continuous-recon run can alert on what it turns up.

Package patchnotes shows release notes pulled from the github releases.

Package pool spreads independent per-item work across a fixed set of workers that all pull from one shared channel.

Package report serializes collected scan results to sarif and markdown.

The scan package provides a collection of security scanning functions.

Package sifpath resolves the per-user sif directories so every subsystem agrees on where user-supplied files live.

Package store persists a run's normalized findings as a json snapshot, one file per target, so a later run can diff against it and surface only what changed.

Package styles provides custom styling options for the SIF tool's console output.

Package version resolves sif's version from the build.