internal/

Package assess decides whether each finding is live trust or an inert copy.

Package detect inspects one file's bytes and reports facts about it.

Package knowledge holds the certificates involved in the October 2026 eMudhra intermediate CA key compromise (Mozilla bug 2083449) and the facts the scanner matches on.

Package weakkey finds elliptic-curve public keys whose private scalar is tiny.