kepr / cd9eb762ada1

Phase B: ecosystem-aware build-script analysis — safety.analyzeBuildScriptEco returns null for ecosystem-safe scripts (build.zig with b.dependency, build.rs, flake.nix, *.zon), HIGH for curl|sh / eval $(curl) / base64|sh / system-path writes, MEDIUM for leftover network in unknown ecosystems; add Confidence enum + BuildScriptFinding + writes_system_paths; trust badge now docks only on HIGH; safety.json emits HIGH-only build risks with confidence; v1.55.1

dev · 14 weeks ago · 2026-06-09 · 13.9 MB

session: safety redesign · agent: claude-opus-4-8

parent: 53abf5562d47