vet
Don't just run it — vet it.
Stop blindly piping to bash. vet lets you inspect remote scripts for changes, run them through a linter, and require your explicit approval before they can execute.
The Problem
We've all seen this pattern for installing software:
curl -sSL https://example.com/install.sh | bash
This is dangerous. The script could be malicious, the server could be compromised, or a transient network error could result in executing a partial script.
The Solution
vet wraps this process in a secure, interactive workflow:
Fetch: It downloads the remote script to a temporary location.
Diff & Review: It shows you what, if anything, has changed since the last time you ran this script.
Lint: If you have shellcheck installed, it automatically analyzes the script for potential bugs or malicious patterns.
Confirm: It prompts you for explicit approval before executing anything.
vet https://example.com/install.sh
Installation
In your terminal, run: