io.github.physics-star-cat/databutler-provenance

databutler-provenance

Live trust signals for domains & packages: age, registrar, typosquat resemblance.

1.0.0
Version
remote
Transport
2
Tools

Security review

Review passed

Reviewed 23h ago.

  • tools: 2 tools scanned
  • metadata: scanned

No findings.

Tools (2)

  • domain_provenance

    Who runs this domain? Live RDAP lookup: registration date and age, registrar, nameservers, status, whether the registrant is redacted, plus a typosquat check (edit-distance / brand-substring) against high-value brands. A very recently registered domain resembling a bank or big brand is a classic phishing signal — but report it as a signal, not a conclusion.

  • package_provenance

    Who publishes this package, and is it a typosquat? Live npm or PyPI lookup: first-publish date and age, release count, latest version, maintainers/author, linked repo, plus a typosquat check against popular package names. Use when an agent is about to install or recommend an unfamiliar dependency.