Hacker News Reader

But how do I trust the tool that guesses how compromised a repo is?

You post it to HN and claim that it's safe. If you aren't proven wrong in the next 2 hours, it probably is.