Trust profile of Kopia
Five levels, each made only of real checks with their source and date.
A trust profile lists which of our checks passed, with the source and date of each. It is not a certification, an approval or a guarantee that the software is harmless.
Level 1
Publisher identity
Who publishes the software: a publisher verified by domain (DNS TXT), company e-mail or staff review, and the developer's ownership claim of the listing.
Checked: 2026-10-24
| Check | Status | Details | Source | Date |
|---|---|---|---|---|
| Verified publisher Required | Verified | Publisher verified (method: staff review). | Publisher verification record | 2026-10-24 |
| Domain or company e-mail Supporting | Not verified | No domain or company e-mail verification on record. | Domain / company e-mail verification | never |
| Ownership claim Supporting | Not verified | No ownership claim on record. | Developer ownership claims | never |
Level 2
Official source
Where the files come from: download links on the publisher's official domains or admin-trusted hosts, and the link checker's safety results (redirects, shorteners, look-alike hosts, HTTPS).
Checked: 2026-10-30
| Check | Status | Details | Source | Date |
|---|---|---|---|---|
| Official download hosts Required | Verified | All download links are on official hosts (19 of 19). trusted host | Official-domain rules (homepage, publisher, trusted hosts) | 2026-10-30 |
| Link safety Required | Verified | All links passed the safety rules (19). | Link checker (redirect chain, safety findings) | 2026-10-30 |
| HTTPS downloads Supporting | Verified | All links use HTTPS (19 of 19). | Release file links | 2026-06-15 |
Level 3
Release integrity
Whether the files are the ones the publisher released: checksums published by the publisher, digital-signature verification, and files that cannot be replaced after approval and are monitored at their official URL.
Checked: 2026-10-30
| Check | Status | Details | Source | Date |
|---|---|---|---|---|
| Publisher checksums Required | Verified | Every file has a publisher checksum (19); matched in a vendor list: 0. | Publisher checksums (manifest / vendor list) | 2026-06-15 |
| Immutable, monitored files Required | Verified | Files frozen after approval and fingerprinted at their URL (19). | Integrity monitor (file fingerprints) | 2026-10-30 |
| Digital signature Supporting | Unknown | The signatures could not be checked (no verifier tool or signature to check). | Signature verifier (scan worker) | never |
Level 4
Security and support
Known vulnerabilities of the latest version and how quickly fixes shipped, whether the version is still supported (end-of-life data) and how regularly new releases appear.
Checked: 2026-10-30
| Check | Status | Details | Source | Date |
|---|---|---|---|---|
| Open vulnerabilities Required | Verified | No known open vulnerability in 0.23.1. | OSV, NVD and CISA KEV | 2026-10-30 |
| Update cadence Required | Verified | Latest release: 2026-06-16 (releases in the catalog: 1). | Release history in the catalog | 2026-06-15 |
| Supported version Supporting | Unknown | No end-of-life data for this software. | endoflife.date | never |
| Patch delay Supporting | Not verified Problem found | Median patch delay: 412 days (vulnerabilities measured: 2). | Release history in the catalog | 2026-06-15 |
Level 5
Continuous monitoring
How recently the platform re-checked the files (integrity monitor), the download links (link checker) and the vulnerability feeds (OSV / NVD / CISA KEV).
Checked: 2026-10-30
| Check | Status | Details | Source | Date |
|---|---|---|---|---|
| Integrity monitoring Required | Verified | Every item was checked recently. | Integrity monitor | 2026-10-30 |
| Link monitoring Required | Verified | Every item was checked recently. | Link checker (redirect chain, safety findings) | 2026-10-30 |
| Vulnerability monitoring Required | Verified | Synchronised recently. | Vulnerability synchronisation | 2026-10-30 |
Future Predictor
Estimated risk that this software is being abandoned
Factors
-
Gap since the last release
Days since the last release: 138 (releases: 1 — too few for a usual gap). · Release history in the catalog
No signal Points: 0 of 2 -
Source repository
The repository is not archived. · Release tracker (source repository)
No signal Points: 0 of 3 -
End-of-life announcements
No end-of-life data. · endoflife.date
No data -
Unpatched vulnerabilities
No open vulnerability in the latest version. · OSV, NVD and CISA KEV
No signal Points: 0 of 2 -
Publisher activity
No other software of this publisher in the catalog. · Release history in the catalog
No data -
Official download links
Broken links: 0 of 19. · Link checker (redirect chain, safety findings)
No signal Points: 0 of 2
- Data window:
- Releases from 2026-06-16 to 2026-11-01 (releases: 1, known vulnerabilities: 2).
- Limits:
- An estimate from public, stored facts only; it cannot see private plans of the publisher, funding or team changes. Confidence grows with the amount of history; with too little data the result is "unknown".
History of changes
Profile first computed: 2026-10-26
- 2026-10-31 Continuous monitoring: Partial → Verified Checks changed: Link monitoring
- 2026-10-30 Release integrity: Partial → Verified Checks changed: Immutable, monitored files
- 2026-10-30 Official source: Partial → Verified Checks changed: Link safety