Structured campaing feed for static analysis tool. Possible collaboration?

[emiliano-go]

I'm building Trustsight, a static PKGBUILD analyzer for AUR review. Your campaign data (especially the packages.txt and accounts.json from the aur-infected campaign) would be valuable as a curator-attributed indicator feed in our IOC federation layer.
Two questions:

• License: Would you consider explicitly licensing the data/campaigns/ metadata (package lists, accounts, timeline) under CC0 or MIT? The current "no warranty" text isn't compatible with redistribution in other open-source tools.
• Format: Would you be open to publishing a machine-readable feed, say, packages-static.json with fields for package_name, campaign_id, first_seen, source_url, confidence? TrustSight consumes signed, attributed baselines where every match names the curator (you). We'd rather consume a feed you maintain than scrape and drift out of sync.

Happy to PR a format proposal if you're open to it.

For context, TrustSight has (and still is) been discussed and reviewed by AUR community members on the Arch forums (thread here), which helped shape its security model and IOC federation approach.