@relic_of_sky

AUREK is a Rust-based security wrapper for yay that scans AUR packages before It fetches and analyzes PKGBUILD files to detect suspicious or potentially malicious behavior, including remote script execution, unsafe sudo usage, dangerous commands, obfuscation, suspicious downloads, permission changes, systemd or cron modifications, and other risky patterns. aurek can also use a local gemma model through llama.cpp for context-aware analysis. This works alongside its heuristic and regex-based detection to provide a stronger security check while keeping the analysis on the user's machine.If something suspicious is found, aurek shows the detected issues and asks the user for confirmation before allowing yay to The project is designed to be extensible, with plans for more detection methods, package managers, and security features.

Privacy preserving ml for llms