1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
# Repo Trust โ built-in default configuration.
#
# This file is embedded in the binary at compile time via include_str!.
# Users override fields by creating ~/.repo-trust/config.toml or
# ./.repo-trust.toml. Environment variables of the form
# REPO_TRUST_<SECTION>__<FIELD>=value
# (note the double underscore separating section and field) override files.
# CLI flags override everything.
#
# Reference: docs/architecture.md ยง11, specs/config-loader.md.
[]
# Name of the environment variable that holds a GitHub Personal Access Token.
# We never store the token itself in config files.
= "GITHUB_TOKEN"
[]
# Default execution mode when --mode is not passed. One of "quick", "standard", "deep".
= "standard"
# Modules enabled by default. Can be overridden per-invocation by --modules / --skip-modules.
= ["stars", "activity", "maintainers", "adoption", "security"]
[]
# Per-module weights for the overall trust-score aggregate. See docs/scoring-model.md.
# Sum need not be exactly 1.0; the aggregator confidence-weights from these.
= 0.20
= 0.25
= 0.20
= 0.20
= 0.15
[]
# Stargazer sample sizes by mode (Phase 2 use; Phase 1 reads but does not apply).
= 0
= 200
= 2000
[]
# Output formats written to --output by default. Terminal is always shown unless --quiet.
= ["terminal", "json"]
[]
# On-disk SQLite cache location. Tilde expansion handled by the loader.
= "~/.repo-trust/cache.db"
# Soft cap on cache file size in megabytes. Phase 1 surfaces this in `cache info`;
# eviction is manual via `repo-trust cache prune` (LRU eviction lands in v1.1).
= 500