The README of the sbase project [0] classifies tools has being audited or not. Looking at the log of the repository I could only find soft references to what such audit entails, such as [1] and [2].
>From what I could understand, an "audited" tools is a tool that someone has read the POSIX specification for it and manually tested its behaviour, later adding the "audited" flag to the README. Is that correct? [0]: https://git.suckless.org/sbase/file/README.html [1]: 4750b233cedcc599652f0ade4a26a76bc3cf7644 [2]: 44bd9318348cff0d971f7bc6c496257854225118