boring-bin

maintainer nizne · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice; the low severity is due to the binary nature and limited project popularity, but sources are verifiable and no malicious behavior is evident.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice; the low severity is due to the binary nature and limited project popularity, but sources are verifiable and no malicious behavior is evident.

PKGBUILD

      1# Maintainer: nizne <nizne@outlook.com>
    
      2_pkgname=boring
    
      3pkgname=${_pkgname}-bin
    
      4pkgver=0.16.1
    
      5pkgrel=1
    
      6pkgdesc="The $(boring) SSH tunnel manager (prebuilt binary)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/alebeck/boring"
    
      9license=('MIT')
    
      10depends=('glibc')
    
      11provides=("${_pkgname}=$pkgver")
    
      12conflicts=("${_pkgname}")
    
      13options=('!strip' '!debug')
    
      14source_x86_64=("${_pkgname}-v${pkgver}-linux-amd64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-linux-amd64.tar.gz")
    
      15source_aarch64=("${_pkgname}-v${pkgver}-linux-arm64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-linux-arm64.tar.gz")
    
      16sha256sums_x86_64=('17428fc912685a642384408072a4fe9a1c6a0f6c14650ba4858f2212e1a1cfe1')
    
      17sha256sums_aarch64=('186021aec9df395caa5676bd34419516e20560c9becc8dd2194ec249c368cafd')
    
      18
    
      19package() {
    
      20    install -Dm755 "${srcdir}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      21    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      22
    
      23    install -d "${pkgdir}/usr/share/bash-completion/completions"
    
      24    install -d "${pkgdir}/usr/share/fish/vendor_completions.d"
    
      25    install -d "${pkgdir}/usr/share/zsh/site-functions"
    
      26
    
      27    "${srcdir}/${_pkgname}" --shell bash >"${pkgdir}/usr/share/bash-completion/completions/${_pkgname}"
    
      28    "${srcdir}/${_pkgname}" --shell fish >"${pkgdir}/usr/share/fish/vendor_completions.d/${_pkgname}.fish"
    
      29    "${srcdir}/${_pkgname}" --shell zsh >"${pkgdir}/usr/share/zsh/site-functions/_${_pkgname}"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 13:21:13	LOW	2