1password-secret-service-beta
LOW
maintainer a_i
0 votes
scanned 2026-08-22 03:16:42.422172
Why flagged
Package builds from a legitimate project source on GitHub; the low severity is due to few votes and recent upload, but the source is verifiable and the build process is standard.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a legitimate project source on GitHub; the low severity is due to few votes and recent upload, but the source is verifiable and the build process is standard.
PKGBUILD
1
# Maintainer: Alex Indigo <ai@aegis.one>
2
3
pkgname=1password-secret-service-beta
4
_projname=1password-secret-service
5
pkgver=0.1.0
6
pkgrel=2
7
pkgdesc="Freedesktop Secret Service (org.freedesktop.secrets) provider backed by 1Password (for 1password-beta users)"
8
arch=('x86_64' 'aarch64')
9
url="https://github.com/alexindigo/1password-secret-service"
10
license=('GPL-3.0-or-later')
11
depends=('1password-beta' 'sqlite' 'glibc')
12
makedepends=('go')
13
provides=('1password-secret-service')
14
conflicts=('1password-secret-service' '1password-secret-service-beta-git')
15
# Go's debug split produces broken build-id symlinks; disable it.
16
options=('!debug')
17
source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz")
18
sha256sums=('0bbc70cf06f42f323528d65fd6bde1262a0c3bde069052caaa0eaff736d59f64')
19
20
build() {
21
cd "${srcdir}/${_projname}-${pkgver}"
22
export CGO_ENABLED=1
23
go build -trimpath -buildmode=pie -ldflags="-s -w" \
24
-o "${_projname}" "./cmd/${_projname}"
25
}
26
27
package() {
28
cd "${srcdir}/${_projname}-${pkgver}"
29
install -Dm755 "${_projname}" "${pkgdir}/usr/bin/${_projname}"
30
install -Dm644 packaging/1password-secret-service.service \
31
"${pkgdir}/usr/lib/systemd/user/1password-secret-service.service"
32
install -Dm644 packaging/org.freedesktop.secrets.service \
33
"${pkgdir}/usr/share/dbus-1/services/org.freedesktop.secrets.service"
34
install -Dm644 LICENSE \
35
"${pkgdir}/usr/share/licenses/${_projname}/LICENSE"
36
}
37
Changes since previous scan
--- PKGBUILD @ 2026-08-17 00:18+++ PKGBUILD @ 2026-08-22 03:16@@ -3,7 +3,7 @@ pkgname=1password-secret-service-beta _projname=1password-secret-service pkgver=0.1.0-pkgrel=1+pkgrel=2 pkgdesc="Freedesktop Secret Service (org.freedesktop.secrets) provider backed by 1Password (for 1password-beta users)" arch=('x86_64' 'aarch64') url="https://github.com/alexindigo/1password-secret-service"@@ -12,18 +12,20 @@ makedepends=('go') provides=('1password-secret-service') conflicts=('1password-secret-service' '1password-secret-service-beta-git')+# Go's debug split produces broken build-id symlinks; disable it.+options=('!debug') source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz") sha256sums=('0bbc70cf06f42f323528d65fd6bde1262a0c3bde069052caaa0eaff736d59f64') build() {- cd "${srcdir}/${pkgname}-${pkgver}"+ cd "${srcdir}/${_projname}-${pkgver}" export CGO_ENABLED=1 go build -trimpath -buildmode=pie -ldflags="-s -w" \ -o "${_projname}" "./cmd/${_projname}" } package() {- cd "${srcdir}/${pkgname}-${pkgver}"+ cd "${srcdir}/${_projname}-${pkgver}" install -Dm755 "${_projname}" "${pkgdir}/usr/bin/${_projname}" install -Dm644 packaging/1password-secret-service.service \ "${pkgdir}/usr/lib/systemd/user/1password-secret-service.service"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-22 03:16:42 | Low | 2 |
| 2026-08-17 00:18:29 | Clean | 2 |
| 2026-08-16 23:34:04 | Low | 1 |