GitHub Trust Auditor v1.0.0
GitHub Trust Auditor v1.0.0
First public release of GitHub Trust Auditor.
Highlights
- Defensive static analysis of accessible public GitHub repositories.
- Bilingual English / فارسی web UI.
- Overall 0–100 account score with transparent score breakdown.
- Repository-by-repository scoring and file/line evidence.
- Wallet/security-focused checks for credential handling, secret exfiltration, clipboard replacement, approvals, transactions, install hooks, obfuscation, and secret exposure.
- GitHub contribution activity used only as a small contextual signal.
- Shareable scan links using
?user=USERNAME. - Share Result, Post on X, Copy Link, and Copy README Badge actions.
- Cache-first repeated scans and GitHub API rate-limit fallback.
- CI, SECURITY policy, contribution guide, code of conduct, issue templates, PR template, and public roadmap.
Important
GitHub Trust Auditor performs context-aware static technical analysis. A clean result does not prove a person is honest, and a risk result does not prove a person is a scammer. Target code is not executed.
Live demo
https://samalpha1.github.io/GitHubTrustAuditor/
Maintainer
GitHub: https://github.com/SamAlpha1
X: https://x.com/samalpha_