Legal / disclaimer

methodology_version 2026.09.0

Not a malware verdict; not a “safe package” score. idlidu pkgs provides best-effort reconstructions of public registry metadata (ownership, versions, yank flags). It does not certify packages as safe.

Soft launch is waitlist-honest: fixture panel + docs + manual keys. Checkout PSP is TBD. Drafts are not counsel-reviewed.

Platform legal pack

Terms · Privacy · AUP · www /legal.

Registry metadata API ToS memo: TOS-MEMO.md (provisional_ok — owner reconfirm before live poll).

Limitations

Public registries only (npm / PyPI / crates.io) — no private registries
Capped universe (seed today; ≤2,000 packages v1)
Structured extract never blocks raw archive ingest
Fetch failures emit fetch_failed; not sold as provenance fact

Acceptable use

Self-serve API/MCP for automated systems. Do not represent idlidu outputs as a security certification, malware verdict, or vulnerability assessment. No support desk / no human sales path.

Dataset: pkgs · Keys: idl_pkgs_…. See methodology.