1password-secret-service

LOW

maintainer a_i 0 votes scanned 2026-08-22 03:16:42.422172

View on AUR

Why flagged

The package builds from a tagged source release on the maintainer's GitHub, which is normal for AUR packages; the low vote count and recent upload are noted but do not indicate active malice or supply-chain compromise.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a tagged source release on the maintainer's GitHub, which is normal for AUR packages; the low vote count and recent upload are noted but do not indicate active malice or supply-chain compromise.

PKGBUILD

      1# Maintainer: Alex Indigo <ai@aegis.one>
    
      2
    
      3pkgname=1password-secret-service
    
      4_projname=1password-secret-service
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc="Freedesktop Secret Service (org.freedesktop.secrets) provider backed by 1Password"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/alexindigo/1password-secret-service"
    
      10license=('GPL-3.0-or-later')
    
      11depends=('1password' 'sqlite' 'glibc')
    
      12makedepends=('go')
    
      13conflicts=('1password-secret-service-git')
    
      14source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz")
    
      15sha256sums=('0bbc70cf06f42f323528d65fd6bde1262a0c3bde069052caaa0eaff736d59f64')
    
      16
    
      17build() {
    
      18	cd "${srcdir}/${_projname}-${pkgver}"
    
      19	export CGO_ENABLED=1
    
      20	go build -trimpath -buildmode=pie -ldflags="-s -w" \
    
      21		-o "${_projname}" "./cmd/${_projname}"
    
      22}
    
      23
    
      24package() {
    
      25	cd "${srcdir}/${_projname}-${pkgver}"
    
      26	install -Dm755 "${_projname}" "${pkgdir}/usr/bin/${_projname}"
    
      27	install -Dm644 packaging/1password-secret-service.service \
    
      28		"${pkgdir}/usr/lib/systemd/user/1password-secret-service.service"
    
      29	install -Dm644 packaging/org.freedesktop.secrets.service \
    
      30		"${pkgdir}/usr/share/dbus-1/services/org.freedesktop.secrets.service"
    
      31	install -Dm644 LICENSE \
    
      32		"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      33}
    
      34

Changes since previous scan

--- PKGBUILD @ 2026-08-17 00:18
+++ PKGBUILD @ 2026-08-22 03:16
@@ -15,14 +15,14 @@
 sha256sums=('0bbc70cf06f42f323528d65fd6bde1262a0c3bde069052caaa0eaff736d59f64')
 
 build() {
-	cd "${srcdir}/${pkgname}-${pkgver}"
+	cd "${srcdir}/${_projname}-${pkgver}"
 	export CGO_ENABLED=1
 	go build -trimpath -buildmode=pie -ldflags="-s -w" \
 		-o "${_projname}" "./cmd/${_projname}"
 }
 
 package() {
-	cd "${srcdir}/${pkgname}-${pkgver}"
+	cd "${srcdir}/${_projname}-${pkgver}"
 	install -Dm755 "${_projname}" "${pkgdir}/usr/bin/${_projname}"
 	install -Dm644 packaging/1password-secret-service.service \
 		"${pkgdir}/usr/lib/systemd/user/1password-secret-service.service"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 03:16:42	Low	2
2026-08-17 00:18:29	Clean	2
2026-08-16 23:34:04	Low	1