Stop thinking about individual packages. Start thinking about Policies: * "No proprietary binaries from companies with known privacy violations." * "Only software with OSI-approved licenses." * "Block any package that requests broad filesystem permissions by default."
using SoftwareSovereign
# Define your personal sovereignty policy
my_policy = SoftwarePolicy(
name = "Libre-Modern-Only",
allowed_licenses = ["GPL-3.0", "MIT", "Apache-2.0"],
disallowed_orgs = ["google", "microsoft", "meta"],
excluded_archs = ["i386", "i686", "noarch"], # Cleanup DNF listings
require_open_source = true,
block_telemetry = true
)
# Audit your entire machine
violations = audit_system(my_policy)
# Enforce the rules
enforce_policy(my_policy)