TrustSight v0.1.0
·
338 commits
to master
since this release
bb87197
This commit was signed with the committer’s verified signature.
emiliano-go
Emiliano G.O.
Initial release of TrustSight, a CLI-based AUR package update vetting tool.
- Review all outdated AUR packages before yay -Syu
- 11 detection rules (R001-R011) covering curl pipe bash, checksum disable, base64 decode, and more
- Deterministic scoring (0-100) with configurable severity weights
- URL classification into trusted forge, official, raw hosting, and unknown buckets
- Novelty tracking for URLs and maintainers (SQLite-backed)
- Optional LLM verdict via OpenAI or Ollama
- IDN homograph detection and score dilution protection
- Config management via trustsight config set/show