@skarn-security/skarn-darwin-x64 0.32.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/EULA.md ADDED
@@ -0,0 +1,109 @@
1
+ # Skarn End User License Agreement
2
+
3
+ Version 1.1, 2026-09-15
4
+
5
+ IMPORTANT: THIS AGREEMENT IS LEGALLY BINDING. BY CONFIRMING ACCEPTANCE WHEN THE SOFTWARE OR A FORM AT GETSKARN.COM PRESENTS THIS AGREEMENT, BY DOWNLOADING, INSTALLING, RUNNING, OR ISSUING ANY COMMAND TO THE SOFTWARE, OR BY AUTHORIZING OR ALLOWING A THIRD PARTY TO DO ANY OF THE FOREGOING ON YOUR BEHALF, YOU INDICATE: (1) YOUR ACCEPTANCE OF THIS AGREEMENT; (2) THAT YOU HAVE READ ALL OF ITS TERMS AND CONDITIONS, UNDERSTAND THEM, AND AGREE TO BE LEGALLY BOUND BY THEM; AND (3) THAT YOU ARE AUTHORIZED TO BIND YOURSELF OR THE ENTITY ON WHOSE BEHALF YOU ACT. IF YOU DO NOT ACCEPT THESE TERMS, DECLINE WHEN THE SOFTWARE OR THE FORM ASKS FOR YOUR ACCEPTANCE, AND DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE.
6
+
7
+ This End User License Agreement (the "Agreement") is a legal agreement between you (an individual acting for purposes outside their trade, business, craft, or profession, referred to as "Consumer", or a legal entity or individual acting for commercial purposes, referred to as "Business User", collectively referred to as "you") and Skarn Software OÜ, a private limited company registered in Estonia under registry code 17585335, with its registered address at Narva mnt 5, 10117 Tallinn, Estonia, referred to as the "Licensor", for the Skarn software. This Agreement is presented to you before use: the Licensor's official distribution channels publish it and distribute it with the Software, the Software presents it and asks for your acceptance the first time you run it, and the registration and purchase forms at getskarn.com present it before a License Token is issued. You accept this Agreement at the earliest of: (a) confirming acceptance when the Software presents it on first run; (b) confirming acceptance when registering for or purchasing a License Token; or (c) downloading, installing, running, or issuing any command to the Software, whether yourself or through a third party you authorize or allow to do so on your behalf. If you do not agree, do not install or use the Software; if the Software asks for your acceptance and you decline, the Software performs no operation. If you accept on behalf of a legal entity, you represent that you are authorized to bind that entity.
8
+
9
+ ## 1. Definitions
10
+
11
+ "Software" means the Skarn executable program in binary form, together with its embedded detection rules, documentation, and any updates the Licensor makes available under this Agreement. The Software is distributed in binary form only; no source code is licensed under this Agreement.
12
+
13
+ "Free Features" means the capabilities of the Software that are available at no charge, whether in Unregistered Use or under a Free License, as published in the Licensor's editions documentation (https://getskarn.com/editions/ and the EDITIONS document distributed with the Software). The editions documentation identifies which Free Features require a Free License.
14
+
15
+ "Unregistered Use" means running the Software without any License Token installed. The Licensor permits Unregistered Use on a perpetual, no-charge basis for the Free Features the editions documentation identifies as available without a License Token. Unregistered Use is use licensed under this Agreement; it is not time-limited and requires no account or registration.
16
+
17
+ "Free License" means a License Token the Licensor issues at no charge upon registration at getskarn.com, which enables the Free Features the editions documentation identifies as requiring a Free License. A Free License does not unlock Paid Features.
18
+
19
+ "Paid License" means a License Token designated Pro, Team, or Enterprise, which unlocks Paid Features for the tier, scope, and term stated in it and in the applicable order.
20
+
21
+ "Paid Features" means the capabilities of the Software designated as Pro, Team, or Enterprise in the editions documentation, which operate only with a valid Paid License covering them. A later change to the editions documentation does not reduce the Paid Features covered by an unexpired Paid License, and does not change the tier an issued License Token designates.
22
+
23
+ "License Token" means a cryptographically signed file issued by or on behalf of the Licensor that identifies the holder and states the tier, scope, and term it authorizes. A License Token is either a Free License or a Paid License.
24
+
25
+ "Feed Content" means detection-rule updates and related signed content the Licensor makes available to holders of a covering License Token.
26
+
27
+ ## 2. License grant
28
+
29
+ Subject to this Agreement, the Licensor grants you a non-exclusive, non-transferable license to install and run the Software, in binary form, on machines you own or control, for your personal, non-commercial use if you are a Consumer or your internal business use if you are a Business User.
30
+
31
+ Unregistered Use of the Free Features that are available without a License Token is permitted at no charge and is not time-limited. There is no evaluation period, no obligation to purchase, and no obligation to delete the Software.
32
+
33
+ A Free License additionally enables the Free Features the editions documentation identifies as requiring one, for the term stated at registration or in the applicable order. Paid Features operate only under a valid Paid License covering them, for the tier, scope, and term stated in it and in the applicable order.
34
+
35
+ Expiry or invalidity of a License Token does not terminate this Agreement, does not require you to delete or stop using the Software, and never disables Unregistered Use; it affects only the capabilities that License Token enables, in the manner described in the editions documentation. License Token requirements are enforced by the Software; if there is any uncertainty about whether a License Token is required for a given use, you may rely upon the behavior of the Software.
36
+
37
+ If you are a Business User, you may permit a contractor or service provider to install and run the Software on machines you own or control, solely for your benefit and for your internal business purposes; you remain fully responsible for their use of the Software under this Agreement. This does not permit the contractor or service provider to offer the Software or its functionality to its own clients as a service (Section 3(b)).
38
+
39
+ ## 3. Restrictions
40
+
41
+ Except to the extent a restriction is not permitted by applicable law including mandatory consumer protection provisions, you shall not: (a) redistribute, sell, rent, lease, sublicense, or otherwise make the Software available to any third party, other than installing it within your own organization or personal devices from the Licensor's official distribution channels; (b) offer the Software, or any part of its functionality, to third parties as a hosted or managed service; (c) modify, translate, or create derivative works of the Software; (d) reverse engineer, decompile, or disassemble the Software, except to the extent expressly permitted by mandatory applicable law (including Articles 5 and 6 of Directive 2009/24/EC and local consumer or software interoperability laws) and then only after first requesting the needed information from the Licensor; (e) circumvent, disable, or tamper with license enforcement, License Token validation, or signature verification in the Software; (f) remove or alter any proprietary notices; (g) share a License Token outside the holder or organization it names, or use a License Token you are not authorized to hold; (h) extract, republish, or redistribute the embedded detection rules or Feed Content outside the Software; (i) use the Software to develop a product or service that competes with the Software; (j) use any credential, secret, or other sensitive artefact identified by the Software to access any system or account, other than for verification and remediation by personnel explicitly authorized to administer the affected system; (k) publish or disclose any benchmark, performance comparison, or detection-efficacy results relating to the Software to any third party without the Licensor's prior written consent. Official distribution channels are those operated by the Licensor, currently getskarn.com, the skarn-security repositories on GitHub, and ghcr.io/skarn-security.
42
+
43
+ ## 4. Ownership
44
+
45
+ The Software is licensed, not sold. The Licensor retains all right, title, and interest in and to the Software, the source code, the binary executable, the detection rules, the Feed Content, and all associated intellectual property rights, including but not limited to copyrights, trademarks, trade secrets, and patent rights. The Software is protected by the copyright laws of the Republic of Estonia, the copyright laws of the European Union, international copyright treaties, and all other applicable intellectual property laws.
46
+
47
+ Your possession, installation, or use of the Software, including Unregistered Use, does not transfer to you any title, ownership, or intellectual property rights in the Software. Scan outputs and reports the Software generates from your data (such as SARIF or HTML files) are your property and your responsibility. Any unauthorized copying, redistribution, reverse engineering, or modification of the Software constitutes a material breach of this Agreement and a direct infringement of the Licensor's copyright. All rights not expressly granted under this Agreement are strictly reserved by the Licensor.
48
+
49
+ ## 5. Feedback
50
+
51
+ If you choose to send the Licensor any suggestions, ideas, bug reports, or feedback about the Software, you hereby grant the Licensor a perpetual, irrevocable, worldwide, royalty-free, fully paid-up, sublicensable, and transferable license to use, disclose, reproduce, license, distribute, and exploit such feedback for any purpose, including improving the Software or developing new products, without any obligation, royalty, restriction, or attribution to you. You are not required to provide feedback, and feedback does not include your scanned data, code, or scan results.
52
+
53
+ ## 6. Third-party components
54
+
55
+ The Software incorporates third-party open-source components (including PCRE2 and SQLite) under their own licenses, listed in the THIRD-PARTY-NOTICES document distributed with the Software. Those licenses govern the respective components; this Agreement governs the Software as a whole.
56
+
57
+ ## 7. Data handling and network features
58
+
59
+ The Software runs on your machines and processes data locally. It does not transmit scanned session content, scan results, or usage telemetry to the Licensor or to third parties, and it makes no network call when it scans; the only personal data it ever transmits is the License Token holder identity during a license renewal you explicitly invoke, as described below. Unregistered Use requires no account. A License Token is verified offline against a key embedded in the Software; the Software makes no activation, callback, heartbeat, or license-check network request at run time. The record of your acceptance of this Agreement is stored in a file on your machine and is not transmitted to the Licensor. Network connections occur only when you explicitly invoke one of the Software's two network features: (a) rule-feed updates, which download signed Feed Content from the Licensor and transmit at most the feed subscriber token that authenticates the subscription; (b) license renewal, which transmits your License Token, including the holder identity stated in it (such as the account and organization name), to the Licensor's licensing service and installs the renewed License Token it returns. Each of these runs only on your explicit invocation, and neither transmits session content or scan results; rule-feed updates are additionally disabled by the offline flag. You are responsible for the consequences of enabling a network feature, including compliance with your organization's policies or personal privacy preferences. Any online services the Licensor operates for license issuance or account management are governed by their own terms and privacy notice.
60
+
61
+ ## 8. Consumer right of withdrawal and digital content delivery
62
+
63
+ If you are a Consumer residing in the European Union or European Economic Area, you acknowledge and agree that upon purchasing a digital License Token or downloading or accessing digital content, you expressly request immediate performance of the contract and explicitly consent to the immediate supply of digital content not on a tangible medium. You hereby acknowledge that by giving such express consent and confirmation, you lose your statutory right of withdrawal (14-day cancellation period) under applicable consumer protection laws such as the Estonian Law of Obligations Act and EU Consumer Rights Directive 2011/83/EU once the supply of the digital content has commenced.
64
+
65
+ ## 9. Your responsibilities
66
+
67
+ The Software reads AI coding-assistant session data and related files present on the machines where you run it. You are responsible for ensuring that you are authorized to access and process that data, and for complying with the laws and internal policies that apply to it.
68
+
69
+ ## 10. Security-tool disclaimer
70
+
71
+ The Software performs pattern-based detection. The Licensor does not warrant that the Software will detect every credential, secret, attack pattern, or security issue, nor that reported findings are free of false positives. The Software surfaces findings; it does not remediate them. You remain responsible for verifying findings, rotating exposed credentials, incident response, and the security of your systems, and you agree not to rely solely on the Software in developing or operating your security program. When the Software's real-time guard operates in an enforcing mode, it may block or delay actions it assesses as risky, including legitimate ones; you are responsible for choosing the enforcement mode and for the consequences of blocked actions. The Software and its output are not legal, compliance, or security advice, and use of the Software does not by itself establish compliance with any law or standard. The Software is not designed or licensed for use in safety-critical systems. For Consumers, this disclaimer applies to the maximum extent permitted by applicable mandatory consumer laws and statutory conformity guarantees.
72
+
73
+ ## 11. Feed Content and updates
74
+
75
+ Feed Content is available to holders of a covering License Token for use within the Software during the subscription term stated in the applicable order. The Licensor may make Software updates available; this Agreement applies to updates unless the update is accompanied by different terms. For Consumers, updates necessary to maintain the digital content in conformity will be provided in accordance with applicable statutory requirements.
76
+
77
+ ## 12. Support
78
+
79
+ The Free Features are provided without a support commitment. Support for Paid Features, if any, is as stated in the applicable order.
80
+
81
+ ## 13. Warranty disclaimer
82
+
83
+ FOR BUSINESS USERS: THE SOFTWARE IS PROVIDED AS IS AND AS AVAILABLE, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT, EXCEPT TO THE EXTENT A WARRANTY CANNOT BE DISCLAIMED UNDER APPLICABLE LAW.
84
+
85
+ FOR CONSUMERS: NOTHING IN THIS AGREEMENT EXCLUDES OR RESTRICTS ANY STATUTORY WARRANTIES, GUARANTEES, OR CONFORMITY RIGHTS TO WHICH YOU ARE ENTITLED UNDER APPLICABLE MANDATORY CONSUMER PROTECTION LAWS INCLUDING THE ESTONIAN LAW OF OBLIGATIONS ACT AND EU DIRECTIVE 2019/770 ON CONTRACTS FOR THE SUPPLY OF DIGITAL CONTENT.
86
+
87
+ ## 14. Limitation of liability
88
+
89
+ TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSOR SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, OR LOSS OF GOODWILL, ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE SOFTWARE. NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THIS AGREEMENT, IF YOUR USE OF THE SOFTWARE IS NOT PAID FOR, MEANING UNREGISTERED USE OR USE UNDER A FREE LICENSE, THE SOFTWARE IS PROVIDED ENTIRELY AS IS AND THE LICENSOR'S AGGREGATE LIABILITY FOR ANY DAMAGES, LOSSES, OR CLAIMS ARISING OUT OF OR IN CONNECTION WITH SUCH USE SHALL BE EXACTLY EUR 0; IN THE CASE OF USE UNDER A PAID LICENSE BY A BUSINESS USER, THE LICENSOR'S AGGREGATE LIABILITY SHALL BE STRICTLY LIMITED TO THE ACTUAL AMOUNTS PAID BY YOU FOR THE SOFTWARE, WHETHER TO THE LICENSOR OR TO ITS AUTHORIZED RESELLER, IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM, WHETHER PAID AS A LUMP SUM OR AS THE SUM OF ALL INSTALLMENTS DUE AND PAID WITHIN THAT SPECIFIC TWELVE-MONTH PERIOD. NOTHING IN THIS AGREEMENT EXCLUDES OR LIMITS LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW, INCLUDING LIABILITY FOR INTENT, GROSS NEGLIGENCE, DEATH, OR PERSONAL INJURY, OR MANDATORY STATUTORY CONSUMER LIABILITIES.
90
+
91
+ ## 15. Term and termination
92
+
93
+ This Agreement is effective until terminated. It terminates automatically if you materially breach it. Upon termination you must stop using the Software and destroy your copies. Paid entitlements end per the applicable order. Sections 3, 4, 5, 9, 10, 13, 14, and 16 through 18 survive termination.
94
+
95
+ ## 16. Export control and sanctions
96
+
97
+ You shall comply with applicable export-control and sanctions laws in your use of the Software and represent that you are not a person or entity to whom supply of the Software is prohibited under those laws.
98
+
99
+ ## 17. General
100
+
101
+ This Agreement is the entire agreement between you and the Licensor regarding the Software and supersedes prior discussions on that subject; where you hold a separately negotiated written agreement with the Licensor covering the Software, that agreement prevails to the extent of any conflict. The Licensor may publish revised versions of this Agreement at https://getskarn.com/terms/; the version and date at the top identify the terms in force. Renewal of a License Token, or continued use of the Software after a revised version is published, constitutes acceptance of the revised terms by Business Users; for Consumers, any material changes will be notified in advance in accordance with applicable law and will not apply retroactively without explicit consent where required by mandatory law. If a provision is held unenforceable, the remainder stays in effect. A failure to enforce a provision is not a waiver. You may not assign this Agreement without the Licensor's written consent; the Licensor may assign this Agreement, in whole, to a successor of the business, with the assignment taking effect on notice published at https://getskarn.com/terms/. This Agreement does not limit any mandatory rights you hold as a consumer under applicable law.
102
+
103
+ ## 18. Governing law and venue
104
+
105
+ This Agreement is governed by the laws of the Republic of Estonia, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods. If you are a Business User, Harju County Court in Tallinn, Estonia has exclusive jurisdiction. If you are a Consumer residing in the European Union or EEA, you may bring legal proceedings in the courts of Estonia or in the courts of your country of residence, and mandatory consumer protection laws and jurisdictional rules of your country of residence shall remain unaffected.
106
+
107
+ ## 19. Contact
108
+
109
+ Licensing questions: hello@getskarn.com
@@ -0,0 +1,139 @@
1
+ # Third-Party Notices
2
+
3
+ Skarn is distributed as a single statically linked binary. It incorporates the third-party components and adapted detection-rule patterns listed below. Each notice applies only to the referenced component or patterns, not to Skarn itself.
4
+
5
+ ## PCRE2
6
+
7
+ - Project: https://github.com/PCRE2Project/pcre2
8
+ - License: BSD-3-Clause WITH PCRE2-exception
9
+ - Statically linked into the Skarn binary as the regular-expression engine for detection rules and session search.
10
+
11
+ ```
12
+ Copyright (c) 1997-2007 University of Cambridge
13
+ Copyright (c) 2007-2024 Philip Hazel
14
+ All rights reserved.
15
+
16
+ PCRE2 Just-In-Time compilation support and the Stack-less Just-In-Time
17
+ compiler:
18
+ Copyright (c) 2009-2024 Zoltan Herczeg
19
+ All rights reserved.
20
+
21
+ Redistribution and use in source and binary forms, with or without
22
+ modification, are permitted provided that the following conditions are met:
23
+
24
+ * Redistributions of source code must retain the above copyright notices,
25
+ this list of conditions and the following disclaimer.
26
+
27
+ * Redistributions in binary form must reproduce the above copyright
28
+ notices, this list of conditions and the following disclaimer in the
29
+ documentation and/or other materials provided with the distribution.
30
+
31
+ * Neither the name of the University of Cambridge nor the names of any
32
+ contributors may be used to endorse or promote products derived from this
33
+ software without specific prior written permission.
34
+
35
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
36
+ AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
37
+ IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
38
+ ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
39
+ LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
40
+ CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
41
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
42
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
43
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
44
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
45
+ POSSIBILITY OF SUCH DAMAGE.
46
+ ```
47
+
48
+ ## SQLite
49
+
50
+ - Project: https://sqlite.org
51
+ - License: Public domain
52
+
53
+ The vendored SQLite amalgamation is compiled into the Skarn binary to read Cursor and VS Code session stores. SQLite is in the public domain and requires no license or attribution; it is listed here for completeness.
54
+
55
+ ## Brand fonts
56
+
57
+ The notices in this section cover the typefaces the Skarn brand surfaces embed, not the Skarn binary, which embeds no font and uses system stacks. getskarn.com self-hosts the IBM Plex woff2 files, and the document surface inlines IBM Plex Sans, IBM Plex Mono and Inter into each rendered page as woff2 data URIs. Embedding a font as a data URI is a permitted use under the SIL Open Font License 1.1, which requires the copyright notice and licence to travel with the font and forbids selling the font by itself.
58
+
59
+ ### IBM Plex
60
+
61
+ - Project: https://github.com/IBM/plex
62
+ - License: SIL Open Font License 1.1 (https://openfontlicense.org)
63
+ - Copyright 2017 IBM Corp.
64
+
65
+ ### Inter
66
+
67
+ - Project: https://github.com/rsms/inter
68
+ - License: SIL Open Font License 1.1 (https://openfontlicense.org)
69
+ - Copyright 2016 The Inter Project Authors
70
+
71
+ ## Detection rules
72
+
73
+ Skarn's bundled community detection rules were adapted from the open-source secret-detection projects listed below. Their license terms require that the attribution and license text be retained in redistribution; they are reproduced here. These notices apply only to the detection-rule patterns adapted from each project, not to Skarn itself.
74
+
75
+ ### gitleaks
76
+
77
+ - Project: https://github.com/gitleaks/gitleaks
78
+ - Copyright (c) 2019 Zachary Rice
79
+ - License: MIT
80
+
81
+ ```
82
+ MIT License
83
+
84
+ Copyright (c) 2019 Zachary Rice
85
+
86
+ Permission is hereby granted, free of charge, to any person obtaining a copy
87
+ of this software and associated documentation files (the "Software"), to deal
88
+ in the Software without restriction, including without limitation the rights
89
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
90
+ copies of the Software, and to permit persons to whom the Software is
91
+ furnished to do so, subject to the following conditions:
92
+
93
+ The above copyright notice and this permission notice shall be included in all
94
+ copies or substantial portions of the Software.
95
+
96
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
97
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
98
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
99
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
100
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
101
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
102
+ SOFTWARE.
103
+ ```
104
+
105
+ ### Kingfisher
106
+
107
+ - Project: https://github.com/mongodb/kingfisher
108
+ - Copyright MongoDB, Inc.
109
+ - License: Apache License 2.0
110
+
111
+ ### Titus
112
+
113
+ - Project: https://github.com/praetorian-inc/titus
114
+ - Copyright Praetorian, Inc.
115
+ - License: Apache License 2.0
116
+
117
+ ### Apache License 2.0
118
+
119
+ The Kingfisher and Titus rule patterns are licensed under the Apache License, Version 2.0. You may obtain a copy of the License at:
120
+
121
+ http://www.apache.org/licenses/LICENSE-2.0
122
+
123
+ Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Rule patterns adapted from these projects have been modified for Skarn's detection engine.
124
+
125
+ ### Upstream NOTICE attributions
126
+
127
+ Kingfisher and Titus each distribute a NOTICE file under Section 4(d) of the Apache License 2.0. The attributions in those files that pertain to rule patterns adapted into Skarn are reproduced below.
128
+
129
+ Titus's detection rules are derived from NoseyParker (https://github.com/praetorian-inc/noseyparker), licensed under the Apache License, Version 2.0. Certain rule patterns adapted from Kingfisher (among them the Firebase, Kubernetes, and Redis rules) are derived in part from Titus.
130
+
131
+ ```
132
+ NoseyParker
133
+ Copyright 2023-2026 Praetorian Security, Inc.
134
+
135
+ This product includes software developed at Praetorian Security, Inc.
136
+ (https://www.praetorian.com/).
137
+
138
+ Licensed under the Apache License, Version 2.0.
139
+ ```
package/bin/skarn ADDED
Binary file
package/package.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "name": "@skarn-security/skarn-darwin-x64",
3
+ "version": "0.32.0",
4
+ "description": "Skarn prebuilt binary for macOS x64 (Intel). Installed automatically by @skarn-security/skarn; do not depend on it directly.",
5
+ "homepage": "https://getskarn.com",
6
+ "license": "SEE LICENSE IN EULA.md",
7
+ "repository": {
8
+ "type": "git",
9
+ "url": "git+https://github.com/skarn-security/skarn-dist.git"
10
+ },
11
+ "os": [
12
+ "darwin"
13
+ ],
14
+ "cpu": [
15
+ "x64"
16
+ ],
17
+ "files": [
18
+ "bin/skarn",
19
+ "EULA.md",
20
+ "THIRD-PARTY-NOTICES.md"
21
+ ],
22
+ "publishConfig": {
23
+ "access": "public"
24
+ }
25
+ }