careervector

LOW

maintainer richc 0 votes scanned 2026-09-12 19:12:35.548512

View on AUR

Why flagged

The package downloads a prebuilt tarball from GitHub Releases, which is a common and generally trustworthy source; the binary is installed directly, but comes from the project's official repository, reducing supply-chain risk despite low votes and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt tarball from GitHub Releases, which is a common and generally trustworthy source; the binary is installed directly, but comes from the project's official repository, reducing supply-chain risk despite low votes and recent upload.

PKGBUILD

      1# Generated by CareerVector packaging/generate.py; do not edit.
    
      2# Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
    
      3pkgname=careervector
    
      4_product=careervector
    
      5pkgver=0.0.1
    
      6pkgrel=1
    
      7pkgdesc='CareerVector desktop workspace'
    
      8arch=(x86_64)
    
      9url='https://careervector.corbet.ch'
    
      10license=('BUSL-1.1')
    
      11depends=(gcc-libs glib2 gtk3 webkit2gtk-4.1 cairo gdk-pixbuf2 dbus)
    
      12options=('!strip' '!debug')
    
      13source_x86_64=(https://github.com/julian-corbet/careervector-releases/releases/download/desktop-v0.0.1/careervector-0.0.1-linux-x86_64.tar.gz)
    
      14sha256sums_x86_64=('88b85252e406912a9c382ce6d245e46c669167d1547aa1bc8efea57aa8ad5cec')
    
      15depends_x86_64=('glibc>=2.39')
    
      16
    
      17package() {
    
      18  local archive_root license_directory desktop_file icon
    
      19  case "$CARCH" in
    
      20    x86_64)
    
      21      archive_root=careervector
    
      22      license_directory=share/licenses/careervector
    
      23      desktop_file=share/applications/ch.corbet.careervector.desktop
    
      24      icon=share/icons/hicolor/256x256/apps/ch.corbet.careervector.png
    
      25      ;;
    
      26    *) return 1 ;;
    
      27  esac
    
      28  install -d "$pkgdir/usr/lib/$_product"
    
      29  cp -a "$srcdir/$archive_root/." "$pkgdir/usr/lib/$_product/"
    
      30  install -Dm644 "$srcdir/$archive_root/$desktop_file" "$pkgdir/usr/share/applications/ch.corbet.careervector.desktop"
    
      31  install -Dm644 "$srcdir/$archive_root/$icon" "$pkgdir/usr/share/icons/hicolor/256x256/apps/ch.corbet.careervector.png"
    
      32  install -d "$pkgdir/usr/share/licenses/$pkgname"
    
      33  cp -a "$srcdir/$archive_root/$license_directory/." "$pkgdir/usr/share/licenses/$pkgname/"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-12 19:12:35	Low	2