Official vs Verified vs trust score

Three questions

1. Verified — is there enough real surface to check?
2. Official — does this namespace match the brand I searched?
3. Trust score — how much published evidence do we have across factors?

Verified

Repo/package/remote reality under our rules. Not “safe.” Not “same company as the brand.”

Official

Query-scoped brand match via DNS or GitHub org proof. Farms that republish other brands do not automatically become Official for those brands.

Trust score

A point sum with a factor list in the API and drawer. Identity alone is capped without corroboration (scoring v3.2). See methodology.

30-second read

Prefer Official for a brand install, open Issues carefully, expand factors before you paste config.