Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.

This project demonstrates how publicly available information and client-side characteristics can be combined to generate an illustrative profile about an individual. The tooling here is intentionally minimal and is intended for educational purposes.

Scans your local machine for AUR packages, looks up when each maintainer was last changed, and blocks anything tied to the 2026 AUR supply-chain attack — so you update only the safe ones via paru/yay.