fix: Restore trusted_packages template entry and revert DefaultConfig change

config/config.template.yml

@@ -55,7 +55,9 @@ proxy_install_only: false
 #
 # The purl is the package identifier and the reason is the reason for trusting the package.
 # PURL specification: https://github.com/package-url/purl-spec
-trusted_packages: []
+trusted_packages:
+  - purl: pkg:npm/@safedep/pmg
+    reason: "PMG is a trusted package for PMG"
 
 # Sandbox configuration (EXPERIMENTAL)
 # When enabled, package managers run in sandbox environments with restricted

config/config_template_test.go

@@ -32,7 +32,7 @@ func TestTemplateParsesAsYAML(t *testing.T) {
 	assert.False(t, false, cfg.Paranoid, "expected Paranoid false")
 	assert.False(t, false, cfg.SkipEventLogging, "expected SkipEventLogging false")
 	assert.Equal(t, 7, cfg.EventLogRetentionDays, "expected EventLogRetentionDays 7")
-	assert.Empty(t, cfg.TrustedPackages)
+	assert.Len(t, cfg.TrustedPackages, 1)
 }
 
 func TestTemplateMatchesDefaults(t *testing.T) {
@@ -56,7 +56,11 @@ func TestTemplateMatchesDefaults(t *testing.T) {
 	assert.Equal(t, def.EventLogRetentionDays, parsed.EventLogRetentionDays, "event_log_retention_days mismatch")
 	assert.Equal(t, def.Verbosity, parsed.Verbosity, "verbosity mismatch")
 
-	assert.Equal(t, def.TrustedPackages, parsed.TrustedPackages, "trusted_packages mismatch")
+	assert.NotEmpty(t, parsed.TrustedPackages, "expected at least one trusted_packages entry")
+
+	first := parsed.TrustedPackages[0]
+	assert.NotEmpty(t, first.Purl, "first trusted package has empty purl")
+	assert.NotEmpty(t, first.Reason, "first trusted package has empty reason")
 
 	assert.Equal(t, def.DependencyCooldown.Enabled, parsed.DependencyCooldown.Enabled, "dependency_cooldown.enabled mismatch")
 	assert.Equal(t, def.DependencyCooldown.Days, parsed.DependencyCooldown.Days, "dependency_cooldown.days mismatch")

config/config_test.go

@@ -25,7 +25,7 @@ func TestConfigHasDefaultValues(t *testing.T) {
 		assert.Equal(t, 5, config.Config.TransitiveDepth)
 		assert.Equal(t, false, config.Config.IncludeDevDependencies)
 		assert.Equal(t, false, config.Config.Paranoid)
-		assert.Equal(t, []TrustedPackage{}, config.Config.TrustedPackages)
+		assert.Len(t, config.Config.TrustedPackages, 1)
 		assert.Equal(t, "/tmp/pmg-test/random-does-not-exist", config.configDir)
 		assert.Equal(t, "/tmp/pmg-test/random-does-not-exist/config.yml", config.configFilePath)
 		assert.Equal(t, false, config.Config.ProxyInstallOnly)