Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ContainsVariable ¶
func IsPackageLauncher ¶
IsPackageLauncher reports whether argv[0] is a documented or related package launcher. Unknown host binaries are not package selectors.
Types ¶
type Result ¶
Result is a pure classification of one literal selector. It never includes the selector text, command arguments, or credential material.
func ClassifyCommand ¶
ClassifyCommand classifies a bounded npx or uvx argv. Other wrappers, unsupported options, local paths, and dynamic commands are not assessed.
func ClassifyImage ¶
ClassifyImage classifies a literal OCI image reference. Version tags, including exact-looking tags and an absent tag, are mutable without a digest. A syntactically valid digest is content-addressed, not publisher-verified.
type Status ¶
type Status string
Status is the complete-assessment outcome of a literal selector.
Policy callers must treat StatusNotAssessed as unknown and must not accept it. Advisory validation maps that status to informational reference-not-assessed findings and must not turn it into a structural error or a policy rejection.