This is a Laravel package/library that provides comprehensive authentication logging and security monitoring capabilities. The package hooks into Laravel's authentication events (Login, Failed, Logout, OtherDeviceLogout) to track user authentication activity including IP addresses, user agents, device fingerprints, and location data. It provides session management (view/revoke sessions), device trust management, suspicious activity detection (multiple failed logins, rapid location changes, unusual login times), notifications via email/Slack/SMS, webhook support, and export functionality (CSV/JSON). The architecture follows Laravel conventions with event listeners, a trait for user models, query scopes, and CLI commands. The codebase demonstrates solid engineering practices with comprehensive test coverage (76 tests), proper type hints, modern PHP 8.2+ features, and clean separation of concerns.
cursor-vip is a client-side Go/TUI application that lets users share Cursor IDE Pro accounts. At runtime it presents a terminal wizard: it fingerprints the machine (MAC-based device ID + machine-id), contacts a private licensing backend (hardcoded hosts: cursor.jeter.eu.org), prints the user's promotion stats, expiry, and payment links, then starts one of several "modes" that make the locally installed Cursor app authenticate as a shared Pro user. Mode 1 is the minimalist mode; modes 2-4 run a local MITM proxy (go-mitmproxy fork) that requires the user to install a trusted root certificate and intercepts Cursor's API traffic, with mode 3 doing free-trial account rotation and mode 4 providing a dedicated "exclusive" account. The core Cursor-manipulation code lives in an `auth/` package absent from this snapshot - go.mod shows it vendors local forks of `machineid` and `go-mitmproxy` - so the visible code is only the client shell, payment flow, and OS plumbing. Architecturally it is a monolith split into packages: `tui` (terminal UI with embedded i18n locale files for 7 languages), `tui/client` (HTTP client using beego v1's httplib against the private API), `tui/shortcut` (a global keyboard hook recognizing typed 3-letter codes like `sm1`/`u3d`/`buy` to switch modes, refresh accounts, or buy access), and `tui/tool` (OS utilities: locale detection, system-proxy configuration for Windows/macOS/Linux, flock-based single-instance enforcement, and MAC fingerprinting). The build script targets 3 OSes x 3 architectures and obfuscates most binaries with `garble`, consistent with a grey-market licensing tool that expects to be reverse-engineered. The project is actively maintained (last commit March 2026) and clearly works for its user base, but the code is average quality: global mutable state in a `params` package, string-concatenated endpoint paths, no tests or CI, an unconditional `mode = 3` override bug in `GetConfig`, and deprecated dependencies (beego v1, dgrijalva/jwt-go v3.x). It also has a questionable security posture - it instructs Mac users to disable SIP, asks for a trusted root CA for the MITM proxy, and requires Windows admin privileges. Engineers should not reuse this codebase as-is for legitimate licensing work; the genuinely extractable parts are the cross-platform OS utilities (locale detection, proxy toggling, single-instance lock, device fingerprinting).