blepfx-prisma-clap-bin

LOW

maintainer muxelplexer 0 votes scanned 2026-10-07 00:21:34.957174

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release and installs it; while the host is not whitelisted, it is plausibly the project's official source, and no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release and installs it; while the host is not whitelisted, it is plausibly the project's official source, and no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Sebastian Muxel <sebastian@muxel.dev>
    
      2
    
      3pkgname='blepfx-prisma-clap-bin'
    
      4pkgver='release_128'
    
      5pkgrel='1'
    
      6pkgdesc='a chromatic manipulator'
    
      7url="https://fx.amee.ee/plugin/prisma"
    
      8license=('custom:Potion Seller Public License')
    
      9source=("https://github.com/blepfx/dist/releases/download/${pkgver//_/-}/prisma-${CARCH}-unknown-linux-gnu.zip"
    
      10    "LICENSE::https://raw.githubusercontent.com/blepfx/dist/refs/heads/main/LICENSE.txt")
    
      11sha256sums=('4b597c380469f26004c351ff7fc57a4617671e1501a49c54cbe7264f62bfbe3d'
    
      12            '1cba06d144eb15023d17c4f41ff04ec404bb19550cec408f72373effdb6463ed')
    
      13arch=('x86_64')
    
      14options=(strip !debug)
    
      15
    
      16package() {
    
      17    mkdir -p "${pkgdir}/usr/lib/clap/"
    
      18    mv "${srcdir}/prisma.clap" "${pkgdir}/usr/lib/clap/prisma.clap"
    
      19}
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-07 00:21:34	Low	2
2026-10-07 00:04:18	Low	2