agentaudit 3.9.14 → 3.9.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/cli.mjs +23 -1
  2. package/package.json +1 -1
package/cli.mjs CHANGED
@@ -1566,10 +1566,32 @@ async function checkPackage(name) {
1566
1566
  console.log(` ${c.dim}Findings: 0 (clean)${c.reset}`);
1567
1567
  }
1568
1568
 
1569
+ // Consensus / Confidence
1570
+ const uniqueAgents = data.unique_agents ?? 0;
1571
+ const confidence = data.confidence ?? 'unverified';
1572
+ const confidenceDisplay = {
1573
+ consensus: { icon: '🟢', label: 'Consensus Certified', color: c.green, desc: `${totalReports} reports from ${uniqueAgents} independent auditors agree` },
1574
+ verified: { icon: '🟢', label: 'Verified', color: c.green, desc: `${totalReports} reports from ${uniqueAgents} auditors` },
1575
+ low: { icon: '🟡', label: 'Low Confidence', color: c.yellow, desc: `${totalReports} reports but ${uniqueAgents <= 1 ? 'only 1 auditor' : `only ${uniqueAgents} auditors`}` },
1576
+ unverified: { icon: '🔴', label: 'Unverified', color: c.yellow, desc: 'Single audit, no independent confirmation' },
1577
+ }[confidence] || { icon: '⚪', label: confidence, color: c.dim, desc: '' };
1578
+ console.log(` ${confidenceDisplay.icon} ${confidenceDisplay.color}${confidenceDisplay.label}${c.reset} ${c.dim}${confidenceDisplay.desc}${c.reset}`);
1579
+
1569
1580
  // Audit info
1570
- console.log(` ${c.dim}Reports: ${totalReports} | Last audited: ${data.last_audited_at ? new Date(data.last_audited_at).toLocaleDateString() : 'unknown'}${c.reset}`);
1581
+ console.log(` ${c.dim}Reports: ${totalReports} | Auditors: ${uniqueAgents} | Last: ${data.last_audited_at ? new Date(data.last_audited_at).toLocaleDateString() : 'unknown'}${c.reset}`);
1571
1582
  if (data.has_official_audit) console.log(` ${c.green}✔ Officially audited${c.reset}`);
1572
1583
 
1584
+ // Recommendation
1585
+ if (confidence === 'unverified' && trustScore >= 70) {
1586
+ console.log();
1587
+ console.log(` ${c.yellow}⚠ Score looks good but only 1 audit exists.${c.reset}`);
1588
+ console.log(` ${c.dim} Consider running your own audit: agentaudit audit ${data.source_url || name}${c.reset}`);
1589
+ } else if (confidence === 'low') {
1590
+ console.log();
1591
+ console.log(` ${c.yellow}⚠ Limited independent verification.${c.reset}`);
1592
+ console.log(` ${c.dim} More auditors needed for consensus. Run: agentaudit audit ${data.source_url || name}${c.reset}`);
1593
+ }
1594
+
1573
1595
  // Links
1574
1596
  console.log();
1575
1597
  if (data.source_url) console.log(` ${c.dim}Source: ${data.source_url}${c.reset}`);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agentaudit",
3
- "version": "3.9.14",
3
+ "version": "3.9.15",
4
4
  "description": "Security scanner for AI packages — MCP server + CLI",
5
5
  "type": "module",
6
6
  "bin": {