Comment by Cyberdog

Going by the "How it works" section of the GitHub page (not the web site), it appears to be both whitelists and blacklists, plus heuristics for unknown brands to flag the keyboard-mash brands that are almost certainly junk.