arch-skm-bin

LOW

maintainer sk8thing 0 votes scanned 2026-11-04 22:08:15.051999

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases, which poses a moderate supply-chain risk, but the source is from the project's own official repository and the checksum is provided, reducing the likelihood of undetected tampering.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 80%): The package downloads prebuilt binaries from GitHub releases, which poses a moderate supply-chain risk, but the source is from the project's own official repository and the checksum is provided, reducing the likelihood of undetected tampering.

PKGBUILD

      1# Maintainer: sk8thing <sk8thing[at]tuta[dot]com>
    
      2
    
      3pkgname=arch-skm-bin
    
      4_pkgname=arch-skm
    
      5pkgver=0.1.1
    
      6pkgrel=1
    
      7pkgdesc="Automated linux kernel building with Signed Kernel Modules (in-tree & out-of-tree) (prebuilt binaries)"
    
      8arch=('x86_64')
    
      9url="https://github.com/sk8thing/${_pkgname}"
    
      10license=('GPL-3.0-only')
    
      11depends=('git' 'rsync')
    
      12optdepends=('base-devel: required to build kernels with makepkg')
    
      13conflicts=('arch-skm')
    
      14options=('!strip')
    
      15
    
      16_arch="linux_amd64"
    
      17_archive="${_pkgname}_${_arch}.tar.gz"
    
      18source=("${_archive}::${url}/releases/download/v${pkgver}/${_archive}")
    
      19sha256sums=('29e89cd6ebfdb180da2a9a467961f127ac29170f03a4b8ec405db23d9ac601c5')
    
      20
    
      21package() {
    
      22  cd "${srcdir}/${_archive%.tar.gz}"
    
      23
    
      24  install -Dm755 skmctl "${pkgdir}/usr/bin/skmctl"
    
      25  install -Dm755 skm "${pkgdir}/usr/lib/skm/skm"
    
      26
    
      27  install -Dm644 completions/skmctl "${pkgdir}/usr/share/bash-completion/completions/skmctl"
    
      28  install -Dm644 completions/_skmctl "${pkgdir}/usr/share/zsh/site-functions/_skmctl"
    
      29  install -Dm644 completions/skmctl.fish "${pkgdir}/usr/share/fish/vendor_completions.d/skmctl.fish"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 22:08:15	Low	2