agent-bar-bin

maintainer noctua · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package downloads a prebuilt binary from a project-owned GitHub repository with a verified checksum; no code execution beyond normal binary installation, but limited popularity and recent upload increase supply-chain risk slightly.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads a prebuilt binary from a project-owned GitHub repository with a verified checksum; no code execution beyond normal binary installation, but limited popularity and recent upload increase supply-chain risk slightly.

PKGBUILD

      1# Maintainer: Othavio <obsidianlab3d@gmail.com>
    
      2pkgname=agent-bar-bin
    
      3pkgver=8.5.0
    
      4pkgrel=1
    
      5pkgdesc="LLM quota monitor for Waybar and Omarchy 4 omarchy-shell (Claude, Codex, Amp, Grok) — standalone binary"
    
      6arch=('x86_64')
    
      7url="https://github.com/othavi0/agent-bar"
    
      8license=('MIT')
    
      9provides=('agent-bar') # futureproof for an eventual source-based agent-bar package
    
      10conflicts=('agent-bar')
    
      11optdepends=('waybar: status bar integration'
    
      12            'libnotify: desktop low/critical quota notifications')
    
      13# Provider CLIs (claude/codex/amp/grok) are detected at runtime; no canonical AUR
    
      14# package names verified, so they are not listed here (see .install).
    
      15install="${pkgname}.install"
    
      16source=("agent-bar-${pkgver}-x86_64.tar.gz::${url}/releases/download/v${pkgver}/agent-bar-${pkgver}-x86_64.tar.gz")
    
      17# Preenchido por release a partir do .sha256 produzido pelo CI. Nunca 'SKIP'.
    
      18sha256sums=('77e8dbaf896c63e7612894ed8b9929727dfc72b312325a8047a58798c1a615ae')
    
      19
    
      20package() {
    
      21  install -Dm755 "${srcdir}/agent-bar" "${pkgdir}/usr/bin/agent-bar"
    
      22  install -Dm755 "${srcdir}/scripts/agent-bar-open-terminal" \
    
      23    "${pkgdir}/usr/share/agent-bar/scripts/agent-bar-open-terminal"
    
      24  for icon in "${srcdir}"/icons/*; do
    
      25    install -Dm644 "$icon" "${pkgdir}/usr/share/agent-bar/icons/$(basename "$icon")"
    
      26  done
    
      27  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      28}
    
      29

Changes since previous scan

--- PKGBUILD @ 2026-07-22 00:29
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 # Maintainer: Othavio <obsidianlab3d@gmail.com>
 pkgname=agent-bar-bin
-pkgver=8.4.1
+pkgver=8.5.0
 pkgrel=1
 pkgdesc="LLM quota monitor for Waybar and Omarchy 4 omarchy-shell (Claude, Codex, Amp, Grok) — standalone binary"
 arch=('x86_64')
@@ -15,7 +15,7 @@
 install="${pkgname}.install"
 source=("agent-bar-${pkgver}-x86_64.tar.gz::${url}/releases/download/v${pkgver}/agent-bar-${pkgver}-x86_64.tar.gz")
 # Preenchido por release a partir do .sha256 produzido pelo CI. Nunca 'SKIP'.
-sha256sums=('e790ffd433cceed526c1862e78701299a21c45881311cb74720e4064f4a867ed')
+sha256sums=('77e8dbaf896c63e7612894ed8b9929727dfc72b312325a8047a58798c1a615ae')
 
 package() {
   install -Dm755 "${srcdir}/agent-bar" "${pkgdir}/usr/bin/agent-bar"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 03:18:55	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 19:17:41	LOW	2
2026-07-21 17:17:32	LOW	2