aurora-ltr
The package builds from a source tarball hosted on the project's own GitHub repository; despite SKIP'd checksum and low popularity, it installs only a Python script and documentation, with no remote code execution or untrusted binary downloads.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a source tarball hosted on the project's own GitHub repository; despite SKIP'd checksum and low popularity, it installs only a Python script and documentation, with no remote code execution or untrusted binary downloads.
PKGBUILD
# Maintainer: JohnChiao <johnchiao@outlook.com>
pkgname=aurora-ltr
pkgver=0.1.0
pkgrel=1
pkgdesc="Lightweight CLI for maintaining AUR packages"
arch=('any')
url="https://github.com/JohnChiao75/aurora"
license=('MIT')
depends=('python' 'git' 'pacman')
makedepends=()
optdepends=(
'base-devel'
'paru'
'yay'
'sudo'
)
# aurutils 也提供 /usr/bin/aur,两者装一起会文件冲突
conflicts=('aurutils')
backup=()
options=('!strip')
source=("AURora-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
sha256sums=('SKIP')
package() {
cd "AURora-$pkgver"
install -Dm755 main.py "$pkgdir/usr/bin/aurora"
ln -s aurora "$pkgdir/usr/bin/aur"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 23:26:39 | Low | 2 |