trustsight

TrustSight is a security auditing tool designed for Arch Linux that inspects AUR PKGBUILD updates prior to installation. It identifies structural changes, malicious commands, and typosquatting while generating a deterministic evidence report that traces findings to specific diffs, URLs, or novelty records. Notable features include local analysis without executing commands, a reputation-based novelty detection model, and a structured output to enhance transparency in the auditing process.