aur-security-dashboard
The package builds from a Git repository hosted on the maintainer's personal GitLab, which is not whitelisted but plausibly the project's own source; the SKIP'd checksum and low-vote count are quality concerns but the content is a local dashboard tool with no remote code execution or data exfiltration observed.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a Git repository hosted on the maintainer's personal GitLab, which is not whitelisted but plausibly the project's own source; the SKIP'd checksum and low-vote count are quality concerns but the content is a local dashboard tool with no remote code execution or data exfiltration observed.
PKGBUILD
# Maintainer: WgpArch <wgparch@riseup.net>
pkgname=aur-security-dashboard
pkgver=1.0.0
pkgrel=1
pkgdesc="A forensic-grade, local SIEM dashboard for Arch Linux to monitor system integrity, audit AUR packages, and hunt anomalies."
arch=('any')
url="https://github.com/WgpArch/aur-security-dashboard"
license=('GPL-3.0-only')
depends=('python' 'python-gobject' 'gtk4')
makedepends=('git')
# Use local file:// protocol to bypass GitHub password prompt!
source=("git+https://gitlab.com/WgpArch/aur-security-dashboard.git#tag=v${pkgver}")
sha256sums=('SKIP')
package() {
cd "$srcdir/$pkgname"
install -Dm755 main.py "$pkgdir/usr/bin/aur-security-dashboard"
install -Dm644 aur-security-dashboard.desktop "$pkgdir/usr/share/applications/aur-security-dashboard.desktop"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
install -dm755 "$pkgdir/usr/share/doc/$pkgname"
cp -r docs/* "$pkgdir/usr/share/doc/$pkgname/"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-01 19:49:11 | Low | 2 |