How to filter out vibe-coded dependencies

I started this project: GitHub - hasufell/vibecode-scanner · GitHub

It’s very early stage and the major limitation is how to find the git repo of a cabal project (I utilize cabal get --source-repository=head). Because without that, you can’t do any interesting checks anyway.

Example:

$ cabal --verbose=0 run vibecode-scanner -- scan hackage hatter
{
    "scannedAgents": [
        {
            "commits": 371,
            "directories": [],
            "files": [],
            "name": "Claude Code"
        }
    ],
    "scannedPkg": "hatter"
}

The agents definition is here. I plan to allow to extend/overwrite that with a Dhall config.