chenzehaoo/moon_guard/lib/verify

README
V
crypto_keypair
V
crypto_sign
V
crypto_verify
V
manifest_sha256
V
report_new
V
trust_store
V
verify_package

chenzehaoo/moon_guard/lib/verify does not have a README file

TyposquatResult

pub(all) struct TyposquatResult {
  suspect : String
  similar_to : String
  distance : Int
  attack_type : String
}

VerifyResult

source

pub(all) struct VerifyResult {
  package_name : String
  is_valid : Bool
  signature_ok : Bool
  trust_status : String
  errors : Array[String]
  warnings : Array[String]
}

audit_package

source

fn audit_package(package_name : String, _package_version : String, manifest : @chenzehaoo/moon_guard/lib/manifest.Manifest
Manifest, entries : Array[@chenzehaoo/moon_guard/lib/manifest.FileEntry
FileEntry], signature_hex : String, signer_key_id : String, trust_store : @chenzehaoo/moon_guard/lib/trust.TrustStore
TrustStore) -> VerifyResult

Full verification pipeline that ties together manifest integrity, signature verification, and trust-store lookup into one call. Used by the moon_guard audit CLI subcommand.

batch_typosquat_check

source

fn batch_typosquat_check(packages : Array[String], known_good : Array[String]) -> Array[TyposquatResult]

detect_typosquat

source

fn detect_typosquat(package_name : String, known_packages : Array[String]) -> Array[TyposquatResult]

detect_typosquat_strict

source

fn detect_typosquat_strict(package_name : String, known_packages : Array[String]) -> Array[TyposquatResult]

Stronger variant that also flags look-alike Unicode / ASCII substitution (1 vs l, 0 vs o, rn vs m) which classic Levenshtein misses.

generate_demo_keypair

source

fn generate_demo_keypair(seed : String) -> (@chenzehaoo/moon_guard/lib/crypto.KeyPair
KeyPair, @chenzehaoo/moon_guard/lib/crypto.KeyPair
KeyPair)

Generate a fresh keypair from a 32-byte seed (64 hex chars) and emit both the public and secret halves in hex. Used by moon_guard keygen.

signature_to_hex

source

fn signature_to_hex(sig : @chenzehaoo/moon_guard/lib/crypto.Signature
Signature) -> String

Convenience helper for the CLI: hex-encode a (Signature r, s) pair without forcing callers to know the inner layout.

typosquat_summary

source

fn typosquat_summary(packages : Array[String], known_good : Array[String]) -> Array[@chenzehaoo/moon_guard/lib/report.TyposquatSummaryEntry
TyposquatSummaryEntry]

Aggregate batch detector: per-package hit counts grouped by suspect.

verify_package

source

fn verify_package(package_name : String, signature_hex : String, public_key_hex : String, content : String) -> VerifyResult

Default is_valid threshold: signature must verify, all file hashes must match the manifest, and the signer must be trusted.

Source Files

Install

Download zip

MoonGuard is a pure-MoonBit supply chain security toolchain providing Ed25519 package signing and verification, SHA-256 manifest integrity checks, JSON+PEM trusted key management, Levenshtein and homoglyph typosquat detection, CVSS-style cumulative risk scores, JSON security reports, and a `moon_guard` CLI with subcommands for keygen, sign, verify, trust, typosquat, manifest, hash, audit, and version. Includes a runnable end-to-end audit example at `examples/basic_audit`. MoonGuard 是用纯 MoonBit 实现的 MoonBit 包供应链安全工具链，提供 Ed25519 签名、SHA-256 清单、JSON+PEM 可信密钥管理、Levenshtein 与同形（homoglyph）双模式 typosquat 检测、CVSS 风格风险评分、JSON 安全报告与 9 子命令 CLI。

securitysupply-chainmoonbited25519sha256typosquatsupply-chain-securitymanifesttrust-storecode-signing依赖混淆供应链安全代码签名清单校验Typosquat 检测

chenzehaoo

Apache-2.0