The Cinder Project
HomeProjectsDiscordDonate

CPAC Trust DB

Community-maintained trust data for CPAC

Overview

cpac-trust-db is the trust data backend for CPAC. It stores two categories of data:

  1. PKGBUILD snapshots — anonymized, crowdsourced snapshots submitted by CPAC clients, used to detect divergence from known-good package states
  2. Maintainer-curated records of known malicious, compromised, or suspicious packages (e.g. Atomic Arch-style hijacks)

Current Status

Active Development

CPAC is currently in active development. Core package resolution algorithms are being refined, and the CLI interface is stabilizing.

Recent Updates