fix shell source line & trusted pkgs parsing

config/config.go

@@ -36,8 +36,8 @@ type Config struct {
 }
 
 type TrustedPackage struct {
-	// Purl of the trusted package. Eg. pkg:npm/express@5.2.1
-	Purl []string `mapstructure:"purls"`
+	// Purls of the trusted package. Eg. pkg:npm/express@5.2.1
+	Purls []string `mapstructure:"purls"`
 }
 
 var (
@@ -57,7 +57,7 @@ func DefaultConfig() Config {
 		Paranoid:               false,
 		DryRun:                 false,
 		InsecureInstallation:   false,
-		TrustedPackages:        TrustedPackage{Purl: []string{}},
+		TrustedPackages:        TrustedPackage{Purls: []string{}},
 	}
 }
 

config/config_test.go

@@ -107,5 +107,5 @@ trusted_packages: {'purls': ["a", "b"]}
 	assert.True(t, cfg.IncludeDevDependencies, "include_dev_dependencies should be overridden by file to true")
 	assert.True(t, cfg.DryRun, "dry_run should be overridden by file to true")
 	assert.True(t, cfg.Paranoid, "paranoid should be overridden by file to true")
-	assert.ElementsMatch(t, []string{"a", "b"}, cfg.TrustedPackages.Purl, "trusted_packages should match file values")
+	assert.ElementsMatch(t, []string{"a", "b"}, cfg.TrustedPackages.Purls, "trusted_packages should match file values")
 }

guard/guard.go

@@ -276,7 +276,7 @@ func (g *packageManagerGuard) isTrustedConfirmable(result *analyzer.PackageVersi
 		return false
 	}
 
-	trustedPkgs := g.config.TrustedPackages.Purl
+	trustedPkgs := g.config.TrustedPackages.Purls
 	if len(trustedPkgs) == 0 {
 		return false
 	}

internal/alias/shells.go

@@ -11,5 +11,5 @@ type Shell interface {
 var commentForRemovingShellSource = "# remove aliases by running `pmg setup remove` or deleting the line"
 
 func defaultShellSource(rcPath string) string {
-	return fmt.Sprintf("%s \n[ -f %s ] && source %s  # PMG source aliases\n", commentForRemovingShellSource, rcPath, rcPath)
+	return fmt.Sprintf("%s \n[ -f '%s' ] && source '%s'  # PMG source aliases\n", commentForRemovingShellSource, rcPath, rcPath)
 }