lorenzo-dev1 / integrity_checker Goto Github PK

First, the goal is to find which repo have been cloned. Then, you can
do a lot of things: check if they were up-to-date or if there are new
versions, check the latest commit to those repos to see if those projects
are still active, verify the hash of the installed files, ...

list all cloned repositories, find the files installed from there and list also the checkout version and the latest commit to the repo (for github repos).

branch git-support

E.g., from the file name you can maybe guess in which package they are
provided (e.g., by downloading the packages first in a cache) and then
try to guess the version of the package based on the version of the other
ones.

the output should first contain high-level statistics,
and then maybe a set of files with the detailed info (e.g., the list of
verified files, etc.)

• Arch Linux packages (ALPs, file extension: .pkg.tar.xz)
• Gentoo packages (file extension: .tbz2)
• RPM packages (file extensions: .rpm, .src.rpm)