Proposal: Complete Migration and Semantic Versioning

[vxfemboy]

Summary

Migrate sif to proper semantic versioning (v1.0.0) and standardize repository references to enable packaging in official Linux distribution repositories.

Problem: Current use of arbitrary VCS commits and inconsistent module paths prevents sif from being included in official package repositories (Void Linux, Debian, Fedora, Arch official repos, etc.).

Solution: Migrate to github.com/vmfunc/sif module path and release v1.0.0 with proper semantic versioning.

Breaking Change: This will break existing Go imports for library users.

---

Why This Is Required

Package Manager Requirements

Most Linux distributions require proper versioned releases from upstream projects. Package managers cannot accept arbitrary git commits or date-based versions.

Example: Void Linux

"Software need to be used in version announced by authors as ready to use by the general public - usually called releases. Betas, arbitrary VCS revisions, templates using tip of development branch taken at build time won't be accepted."

— void-packages/CONTRIBUTING.md

Similar requirements exist for:

• Debian/Ubuntu (APT)
• Fedora/RHEL (DNF/RPM)
• Arch Linux official repos
• Alpine Linux (APK)
• Nix/NixOS
• Snap/Flatpak stores

---

Current Issues

Total: 86 occurrences of dropalldatabases across 36 files

1. Go Module Declaration (1 occurrence)

• sif/go.mod

  Line 1 in a36993a

  module github.com/dropalldatabases/sif

2. Go Internal Imports (72 occurrences across 33 files)

Main Application Files (11 occurrences)

• sif/sif.go

  Line 27 in a36993a

  "github.com/dropalldatabases/sif/internal/config"

• sif/sif.go

  Line 28 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/sif.go

  Line 29 in a36993a

  "github.com/dropalldatabases/sif/internal/modules"

• sif/sif.go

  Line 30 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/sif.go

  Line 31 in a36993a

  "github.com/dropalldatabases/sif/internal/scan"

• sif/sif.go

  Line 32 in a36993a

  "github.com/dropalldatabases/sif/internal/scan/frameworks"

• sif/sif.go

  Line 33 in a36993a

  jsscan "github.com/dropalldatabases/sif/internal/scan/js"

• sif/sif_test.go

  Line 18 in a36993a

  "github.com/dropalldatabases/sif/internal/config"

• sif/cmd/sif/main.go

  Line 17 in a36993a

  "github.com/dropalldatabases/sif"

• sif/cmd/sif/main.go

  Line 18 in a36993a

  "github.com/dropalldatabases/sif/internal/config"

• sif/cmd/sif/main.go

  Line 21 in a36993a

  _ "github.com/dropalldatabases/sif/internal/scan/frameworks/detectors"

Internal Scan Modules (42 occurrences)

• sif/internal/scan/scan.go

  Line 29 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/scan.go

  Line 30 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/cloudstorage.go

  Line 23 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/cloudstorage.go

  Line 24 in a36993a

  "github.com/dropalldatabases/sif/internal/styles"

• sif/internal/scan/cms.go

  Line 21 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/cms.go

  Line 22 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/dirlist.go

  Line 25 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/dirlist.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/dnslist.go

  Line 24 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/dnslist.go

  Line 25 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/dork.go

  Line 28 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/dork.go

  Line 29 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/git.go

  Line 24 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/git.go

  Line 25 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/headers.go

  Line 20 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/headers.go

  Line 21 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/lfi.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/lfi.go

  Line 27 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/nuclei.go

  Line 23 in a36993a

  "github.com/dropalldatabases/sif/internal/nuclei/format"

• sif/internal/scan/nuclei.go

  Line 24 in a36993a

  "github.com/dropalldatabases/sif/internal/nuclei/templates"

• sif/internal/scan/nuclei.go

  Line 25 in a36993a

  sifoutput "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/ports.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/ports.go

  Line 27 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/shodan.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/shodan.go

  Line 27 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/sql.go

  Line 25 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/sql.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/subdomaintakeover.go

  Line 18 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/subdomaintakeover.go

  Line 19 in a36993a

  "github.com/dropalldatabases/sif/internal/styles"

• sif/internal/scan/whois.go

  Line 19 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/whois.go

  Line 20 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/js/scan.go

  Line 25 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/js/scan.go

  Line 26 in a36993a

  "github.com/dropalldatabases/sif/internal/scan/js/frameworks"

• sif/internal/scan/frameworks/detect.go

  Line 23 in a36993a

  "github.com/dropalldatabases/sif/internal/logger"

• sif/internal/scan/frameworks/detect.go

  Line 24 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/scan/frameworks/detect_test.go

  Line 21 in a36993a

  "github.com/dropalldatabases/sif/internal/scan/frameworks"

• sif/internal/scan/frameworks/detect_test.go

  Line 23 in a36993a

  _ "github.com/dropalldatabases/sif/internal/scan/frameworks/detectors"

• sif/internal/scan/frameworks/detectors/backend.go

  Line 26 in a36993a

  fw "github.com/dropalldatabases/sif/internal/scan/frameworks"

• sif/internal/scan/frameworks/detectors/cms.go

  Line 25 in a36993a

  fw "github.com/dropalldatabases/sif/internal/scan/frameworks"

• sif/internal/scan/frameworks/detectors/frontend.go

  Line 25 in a36993a

  fw "github.com/dropalldatabases/sif/internal/scan/frameworks"

• sif/internal/scan/frameworks/detectors/meta.go

  Line 25 in a36993a

  fw "github.com/dropalldatabases/sif/internal/scan/frameworks"

Other Internal Modules (3 occurrences)

• sif/internal/modules/loader.go

  Line 22 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

• sif/internal/nuclei/format/format.go

  Line 18 in a36993a

  "github.com/dropalldatabases/sif/internal/styles"

• sif/internal/styles/styles.go

  Line 19 in a36993a

  "github.com/dropalldatabases/sif/internal/output"

3. External Runtime Data URLs (5 occurrences)

All pointing to github.com/dropalldatabases/sif-runtime:

• sif/internal/scan/ports.go

  Line 30 in a36993a

  const commonPorts = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/ports/top-ports.txt"

• sif/internal/scan/dirlist.go

  Line 30 in a36993a

  directoryURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dirlist/"

• sif/internal/scan/dork.go

  Line 34 in a36993a

  dorkURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dork/"

• sif/internal/scan/dnslist.go

  Line 29 in a36993a

  dnsURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dnslist/"

• sif/internal/scan/git.go

  Line 29 in a36993a

  gitURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/git/"

4. Documentation (6 occurrences)

• sif/CONTRIBUTING.md

  Line 7 in a36993a

  *By contributing to this repository, you agree to adhere to the sif [Code of Conduct](https://github.com/dropalldatabases/sif/blob/main/CODE_OF_CONDUCT.md). Not doing so may result in a ban.*

• sif/CONTRIBUTING.md

  Line 12 in a36993a

  - Have a look at our [issue tracker](https://github.com/dropalldatabases/sif/issues).

• sif/CONTRIBUTING.md

  Line 25 in a36993a

  If you believe you've found a bug, or you have a new feature to request, please hop on the [Discord server](https://discord.gg/dropalldatabases) first to discuss it.

• sif/docs/development.md

  Line 14 in a36993a

  git clone https://github.com/dropalldatabases/sif.git

• sif/docs/installation.md

  Line 42 in a36993a

  git clone https://github.com/dropalldatabases/sif.git

• sif/docs/README.md

  Line 34 in a36993a

  git clone https://github.com/dropalldatabases/sif.git && cd sif && make

5. VS Code Workspace (2 occurrences)

• sif/sif.code-workspace

  Line 7 in a36993a

  "name": "sif-runtime",

• sif/sif.code-workspace

  Line 8 in a36993a

  "path": "../sif-runtime"

6. No Proper Semantic Versioning

• ❌ Current: 0.0.0.20260106 with commit hash
• ❌ Recent tags: automated-release-<hash>
• ❌ Last proper release: v2024.10.12 (CalVer)

---

Proposed Changes

Module Migration (Breaking Change)

• Change Go module path: github.com/dropalldatabases/sif → github.com/vmfunc/sif
• Update all internal imports
• Impact: Breaks existing Go library imports (binary users unaffected)

Versioning Strategy

• Release v1.0.0 as first official semantic version
• Future versions follow SemVer:
  • v1.x.0 - New features
  • v1.0.x - Bug fixes
  • v2.0.0 - Breaking changes

[vxfemboy]

should add #50 (comment) to the migration plan aswell

Problem

The Makefile and other files still contain references to discontinued lunchcat domains and old repository URLs that are now inactive. These need to be updated to reflect the current vmfunc organization, while preserving historical copyright attribution to "lunchcat alumni & contributors".

---

Files Requiring Changes

1. Makefile (2 changes)

Location:

sif/Makefile

Lines 35 to 36 in a36993a

	│ • Starring our repo: https://github.com/lunchcat/sif │
	│ • Supporting the devs: https://lunchcat.dev │

Line 35: Update repository URL

# BEFORE
│  • Starring our repo: https://github.com/lunchcat/sif      │

# AFTER
│  • Starring our repo: https://github.com/vmfunc/sif       │

Line 36: Remove discontinued domain

# BEFORE
│  • Supporting the devs: https://lunchcat.dev               │

# AFTER
# Remove this entire line

2. .all-contributorsrc (1 change)

Location:

sif/.all-contributorsrc

Line 3 in a36993a

"projectOwner": "lunchcat",

Line 3: Update project owner

// BEFORE
"projectOwner": "lunchcat",

// AFTER
"projectOwner": "vmfunc",

3. README.md (2 changes)

Location:

sif/README.md

Line 215 in a36993a

<td align="center" valign="top" width="14.28%"><a href="https://github.com/macdoos"><img src="https://avatars.githubusercontent.com/u/127897805?v=4?s=100" width="100px;" alt="macdoos"/><br /><sub><b>macdoos</b></sub></a><br /><a href="https://github.com/lunchcat/sif/commits?author=macdoos" title="Code">💻</a></td>

Line 215: Update macdoos contributor commit link

# BEFORE
<a href="https://github.com/lunchcat/sif/commits?author=macdoos" title="Code">💻</a>

# AFTER
<a href="https://github.com/vmfunc/sif/commits?author=macdoos" title="Code">💻</a>

Line 219: Update vxfemboy contributor commit link

# BEFORE
<a href="https://github.com/lunchcat/sif/commits?author=vxfemboy" title="Code">💻</a>

# AFTER
<a href="https://github.com/vmfunc/sif/commits?author=vxfemboy" title="Code">💻</a>

4. internal/config/config.go (1 change)

Location:

sif/internal/config/config.go

Line 109 in a36993a

flagSet.BoolVar(&settings.ApiMode, "api", false, "Enable API mode. Only useful for internal lunchcat usage"),

Line 109: Update outdated API mode description

// BEFORE
flagSet.BoolVar(&settings.ApiMode, "api", false, "Enable API mode. Only useful for internal lunchcat usage"),

// AFTER
flagSet.BoolVar(&settings.ApiMode, "api", false, "Enable API mode for JSON output"),

---

Implementation Checklist

• Update Makefile line 35: Repository URL
• Remove Makefile line 36: Discontinued lunchcat.dev domain
• Update .all-contributorsrc projectOwner
• Update README.md line 215: macdoos contributor link
• Update README.md line 219: vxfemboy contributor link
• Update internal/config/config.go line 109: API mode description

---

What This Does NOT Change

✅ PRESERVED: All copyright headers in 59 Go files containing lunchcat alumni & contributors
✅ PRESERVED: LICENSE file attribution to lunchcat alumni
✅ PRESERVED: .github/workflows/header-check.yml header validation

Rationale: Copyright attribution to "lunchcat alumni" is kept for historical continuity and to acknowledge past contributors. Only active domain references and erroneous information are removed.

---

Files Modified Summary

• Makefile - 1 URL update + 1 line removal
• .all-contributorsrc - 1 projectOwner change
• README.md - 2 contributor link updates
• internal/config/config.go - 1 description update

Total: 4 files, 6 changes

---

Expected Outcome

All discontinued lunchcat domain/URL references will be removed or updated to vmfunc organization, while preserving historical copyright attribution to "lunchcat alumni & contributors" in source file headers and LICENSE.

[0x4bs3nt]

@vxfemboy The original issue contains documentation issues in CONTRIBUTING.md that were patched in #55, so those can be safely ignored.

[vxfemboy]

I've completed the migration and created PR #59 for this issue.

What's Included

Atomic Go Module Migration (86 occurrences across 37 files):

• Updated module path: github.com/dropalldatabases/sif → github.com/vmfunc/sif
• All 72 import statements across 33 Go source files
• 5 external runtime data URLs → github.com/vmfunc/sif-runtime
• Documentation updates (installation, development, contributing)
• Domain fixes from remove references to lunchcat domain #50 (lunchcat → vmfunc references)
• Standardized all Discord links to discord.com/invite/sifcli
• Created comprehensive CHANGELOG.md with migration guide

Why This Exceeds the 5-File Preference

Go module path migrations must be atomic to prevent CI failures. Changing go.mod alone breaks all imports immediately, requiring all 33 source files to be updated in the same PR. The PR description explains this technical constraint in detail.

Commit Structure

Organized into 8 logical commits (≤5 files each) for easier review:

1. Core module path (4 files)
2. Internal scan modules part 1 (5 files)
3. Internal scan modules part 2 (5 files)
4. Internal scan modules part 3 (5 files)
5. Framework detection (5 files)
6. Remaining internal modules (5 files)
7. Documentation + config (5 files)
8. Domain fixes + CHANGELOG (4 files)

Verification

✅ Compilation: go build ./... passes
✅ Tests: go test ./... passes
✅ Dependencies: go mod tidy completed
✅ Rebased on latest main (includes PR #55, #56)

What This Enables

With v1.0.0 and proper semantic versioning, sif can now be:

• ✅ Packaged in official distribution repositories (Void Linux, Debian, Fedora, Arch, Alpine, etc.)
• ✅ Installed via system package managers (apt install sif, dnf install sif)
• ✅ Automatically updated via system updates
• ✅ Vetted and trusted by distribution maintainers

@vmfunc - Ready for your review and comments. The PR description includes a detailed 6-phase roadmap for the v1.0.0 release process after merge