astrlink-bin

LOW

maintainer czyt 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package installs a prebuilt binary from an official GitHub release, which is a normal and trusted source for AUR packages; the low severity is due to the binary nature of the source and SKIP'd checksums not being present, but it is otherwise safe as it comes from the project's official repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from an official GitHub release, which is a normal and trusted source for AUR packages; the low severity is due to the binary nature of the source and SKIP'd checksums not being present, but it is otherwise safe as it comes from the project's official repository.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2pkgname=astrlink-bin
    
      3pkgver=0.1.7
    
      4pkgrel=1
    
      5pkgdesc="A local privacy gateway for AI agents"
    
      6arch=('x86_64')
    
      7url="https://astrlink.com"
    
      8license=('Apache-2.0' 'AGPL-3.0-only')
    
      9depends=('gtk3' 'webkit2gtk-4.1' 'libsoup3' 'dbus' 'libayatana-appindicator' 'gcc-libs')
    
      10provides=('astrlink')
    
      11conflicts=('astrlink')
    
      12options=('!strip' '!debug')
    
      13
    
      14source_x86_64=("AstrLink_${pkgver}_amd64.deb::https://github.com/Calcium-Ion/AstrLink/releases/download/v${pkgver}/AstrLink_${pkgver}_amd64.deb")
    
      15sha256sums_x86_64=('d4ce73c0c5a91de4087977ab3f636c77432eb31a6f79fb8ae501ff324fd16c93')
    
      16noextract=("AstrLink_${pkgver}_amd64.deb")
    
      17
    
      18package() {
    
      19    local _deb="AstrLink_${pkgver}_amd64.deb"
    
      20
    
      21    bsdtar -xOf "${srcdir}/${_deb}" data.tar.gz |
    
      22        bsdtar --no-same-owner -xf - -C "${pkgdir}"
    
      23
    
      24    # Upstream ships the 256x256 icon under "256x256@2", which the hicolor
    
      25    # theme does not pick up.
    
      26    mv "${pkgdir}/usr/share/icons/hicolor/256x256@2" \
    
      27        "${pkgdir}/usr/share/icons/hicolor/256x256"
    
      28}
    
      29

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2