mooncakes.io

README

chenzehaoo/moon_guard/lib/manifest does not have a README file

#
FileEntry

pub(all) struct FileEntry {
  path : String
  content : String
}

#
FileHash

source

pub struct FileHash {
  path : String
  hash : String
  size : Int
} derive(Eq)

MoonGuard Manifest Module Package manifest generation and hash calculation

#
Manifest

source

pub struct Manifest {
  version : String
  package_name : String
  package_version : String
  total_files : Int
  total_size : Int
  created_at : String
  files : Array[FileHash]
}

#
Manifest::new

source

fn Manifest::new(package_name : String, package_version : String) -> Manifest

Create a new manifest

#
compute_file_hash

source

fn compute_file_hash(entry : FileEntry) -> FileHash

Compute hash for a single file entry

#
generate_manifest

source

fn generate_manifest(package_name : String, package_version : String, entries : Array[FileEntry]) -> Manifest

Generate manifest from a list of file entries

#
hash_string

source

fn hash_string(content : String) -> String

Hash string content

#
manifest_from_json

source

fn manifest_from_json(json : String) -> Manifest?

Parse a manifest_to_json document back into a Manifest. Returns None when the document is malformed so the caller can fall back to a freshly generated manifest. This is what lets the CLI audit an existing on-disk manifest.json instead of only freshly generated ones.

#
manifest_summary

source

fn manifest_summary(manifest : Manifest) -> String

Get manifest summary

#
manifest_to_json

source

fn manifest_to_json(manifest : Manifest) -> String

Serialize manifest to JSON string

#
sha256

source

fn sha256(data : String) -> String

Calculate SHA-256 hash of a string

#
slice_chars_

source

fn slice_chars_(s : String, start : Int, end_ : Int) -> String

Take the inclusive-exclusive [start, end) slice of s. Replaces the deprecated String::substring(start, end) call site used by the verify and CLI modules.

#
take_chars_

source

fn take_chars_(s : String, n : Int) -> String

Take the first n characters of s. Replaces the deprecated String::substring(start=0, end=n) call site used by the verify and CLI modules.

#
verify_manifest

source

fn verify_manifest(manifest : Manifest, entries : Array[FileEntry]) -> Array[String]

Verify file entries against an existing manifest, returns list of mismatched paths

Source Files

manifest.mbt

Install

moon add chenzehaoo/moon_guard@0.1.10

Download zip

MoonGuard is a pure-MoonBit supply chain security toolchain providing Ed25519 package signing and verification, SHA-256 manifest integrity checks, JSON+PEM trusted key management, Levenshtein and homoglyph typosquat detection, CVSS-style cumulative risk scores, JSON security reports, and a `moon_guard` CLI with subcommands for keygen, sign, verify, trust, typosquat, manifest, hash, audit, and version. Includes a runnable end-to-end audit example at `examples/basic_audit`. MoonGuard 是用纯 MoonBit 实现的 MoonBit 包供应链安全工具链，提供 Ed25519 签名、SHA-256 清单、JSON+PEM 可信密钥管理、Levenshtein 与同形（homoglyph）双模式 typosquat 检测、CVSS 风格风险评分、JSON 安全报告与 9 子命令 CLI。

securitysupply-chainmoonbited25519sha256typosquatsupply-chain-securitymanifesttrust-storecode-signing依赖混淆供应链安全代码签名清单校验Typosquat 检测