agent-console-bin

maintainer cyl-castillo · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package repacks a prebuilt .deb from the project's official GitHub repository, which is a normal and expected practice for AUR binary packages; the source is verifiable and matches the upstream release, so the risk is low despite the host not being on a whitelist.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repacks a prebuilt .deb from the project's official GitHub repository, which is a normal and expected practice for AUR binary packages; the source is verifiable and matches the upstream release, so the risk is low despite the host not being on a whitelist.

PKGBUILD

1# Maintainer: Carlos Castillo <cmcastillochacon91@gmail.com>
2# Repacks the .deb published on GitHub Releases — identical binaries to every
3# other channel. Version + checksums are bumped automatically by the
4# publish-aur job in the repo's release workflow (updpkgsums).
5pkgname=agent-console-bin
6pkgver=0.66.0
7pkgrel=1
8pkgdesc="Minimalist AI-native console for directing coding agents inside a repository"
9arch=('x86_64')
10url="https://github.com/cyl-castillo/agent-console"
11license=('MIT')
12depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'alsa-lib' 'nodejs' 'git')
13optdepends=('npm: to install the Claude Code CLI (npm i -g @anthropic-ai/claude-code)')
14provides=('agent-console')
15conflicts=('agent-console')
16options=('!strip')
17source=("$url/releases/download/v$pkgver/Agent.Console_${pkgver}_amd64.deb"
18 "LICENSE-$pkgver::https://raw.githubusercontent.com/cyl-castillo/agent-console/v$pkgver/LICENSE")
19sha256sums=('be84776d695fff1cfdb0b90a9244adbe8724a1446bffabf57cbd8505b0689f05'
20 'bdf1d8fe99335432f1cf4e9bf20da2795f3bdb11f72f84e2a2edb5037664ad8e')
21
22package() {
23 # makepkg already unpacked the .deb (ar archive) into $srcdir; the payload
24 # lives in data.tar.gz with usr/{bin,lib,share} layout — matches Arch.
25 bsdtar -xf "$srcdir/data.tar.gz" -C "$pkgdir"
26 install -Dm644 "$srcdir/LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
27}
28

Changes since previous scan

--- PKGBUILD @ 2026-07-30 00:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -3,7 +3,7 @@
# other channel. Version + checksums are bumped automatically by the
# publish-aur job in the repo's release workflow (updpkgsums).
pkgname=agent-console-bin
-pkgver=0.65.0
+pkgver=0.66.0
pkgrel=1
pkgdesc="Minimalist AI-native console for directing coding agents inside a repository"
arch=('x86_64')
@@ -16,7 +16,7 @@
options=('!strip')
source=("$url/releases/download/v$pkgver/Agent.Console_${pkgver}_amd64.deb"
"LICENSE-$pkgver::https://raw.githubusercontent.com/cyl-castillo/agent-console/v$pkgver/LICENSE")
-sha256sums=('c3b9a6210fae9f25955e2b5b4551b0071712e65592005cfd705bdc637599e5cb'
+sha256sums=('be84776d695fff1cfdb0b90a9244adbe8724a1446bffabf57cbd8505b0689f05'
'bdf1d8fe99335432f1cf4e9bf20da2795f3bdb11f72f84e2a2edb5037664ad8e')
package() {

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 17:15:21 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 15:39:03 LOW 2
2026-07-28 13:38:59 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 13:27:52 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 23:22:13 LOW 2
2026-07-22 15:20:42 LOW 2
2026-07-22 03:18:55 LOW 2
2026-07-22 01:18:42 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion