aur-security-dashboard

LOW
maintainer WgpArch 0 votes scanned 2026-09-01 19:49:11.398670
View on AUR
Why flagged

The package builds from a Git repository hosted on the maintainer's personal GitLab, which is not whitelisted but plausibly the project's own source; the SKIP'd checksum and low-vote count are quality concerns but the content is a local dashboard tool with no remote code execution or data exfiltration observed.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a Git repository hosted on the maintainer's personal GitLab, which is not whitelisted but plausibly the project's own source; the SKIP'd checksum and low-vote count are quality concerns but the content is a local dashboard tool with no remote code execution or data exfiltration observed.

PKGBUILD

1# Maintainer: WgpArch <wgparch@riseup.net>
2pkgname=aur-security-dashboard
3pkgver=1.0.0
4pkgrel=1
5pkgdesc="A forensic-grade, local SIEM dashboard for Arch Linux to monitor system integrity, audit AUR packages, and hunt anomalies."
6arch=('any')
7url="https://github.com/WgpArch/aur-security-dashboard"
8license=('GPL-3.0-only')
9depends=('python' 'python-gobject' 'gtk4')
10makedepends=('git')
11# Use local file:// protocol to bypass GitHub password prompt!
12source=("git+https://gitlab.com/WgpArch/aur-security-dashboard.git#tag=v${pkgver}")
13sha256sums=('SKIP')
14
15package() {
16 cd "$srcdir/$pkgname"
17 install -Dm755 main.py "$pkgdir/usr/bin/aur-security-dashboard"
18 install -Dm644 aur-security-dashboard.desktop "$pkgdir/usr/share/applications/aur-security-dashboard.desktop"
19 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
20 install -dm755 "$pkgdir/usr/share/doc/$pkgname"
21 cp -r docs/* "$pkgdir/usr/share/doc/$pkgname/"
22}
23

Scan history

Scanned at (UTC)SeverityRules
2026-09-01 19:49:11 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion