Metadata-Version: 2.4
Name: jwlegit
Version: 0.1.0
Summary: URL reputation checker — queries urlscan.io, VirusTotal, AbuseIPDB, Google Safe Browsing, RDAP, and TLS certificate analysis in parallel
Project-URL: Homepage, https://github.com/janwychowaniak/jwlegit
Project-URL: Repository, https://github.com/janwychowaniak/jwlegit
Project-URL: Issues, https://github.com/janwychowaniak/jwlegit/issues
Author-email: Jan Wychowaniak <43786923+janwychowaniak@users.noreply.github.com>
License-Expression: MIT
License-File: LICENSE
Keywords: abuseipdb,cli,malware,phishing,rdap,reputation,safebrowsing,security,tls,url,urlscan,virustotal,whois
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Information Technology
Classifier: Intended Audience :: System Administrators
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Internet
Classifier: Topic :: Security
Classifier: Typing :: Typed
Requires-Python: >=3.11
Requires-Dist: httpx>=0.27
Description-Content-Type: text/markdown

# jwlegit

URL reputation checker — queries urlscan.io, VirusTotal, AbuseIPDB, Google Safe Browsing, and performs TLS certificate analysis in parallel, presenting a combined report.

## Installation

```bash
uv pip install -e .
```

## Configuration

This tool reads the following environment variables:

| Variable                      | Service              | Notes                            |
|-------------------------------|----------------------|----------------------------------|
| `URLSCAN_API_KEY`             | urlscan.io           | Submits a scan and polls         |
| `VIRUSTOTAL_API_KEY`          | VirusTotal           | Submits URL and polls analysis   |
| `ABUSEIPDB_API_KEY`           | AbuseIPDB            | Checks the resolved IP, not URL  |
| `GOOGLE_SAFEBROWSING_API_KEY` | Google Safe Browsing | Single lookup                    |
| —                             | TLS Certificate      | No key required                  |
| —                             | RDAP / WHOIS         | No key required                  |

Set them however you prefer. Missing credentials cause that service to be skipped — the tool won't crash.

## Usage

```bash
jwlegit https://example.com
```

Or without installing:

```bash
uv run jwlegit https://example.com
```
