cargo-pretty-build-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-09-10 21:21:21.441781

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the low severity is due to the binary not being built from source and the project having few votes and recent upload, increasing supply-chain risk slightly but not indicating active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the low severity is due to the binary not being built from source and the project having few votes and recent upload, increasing supply-chain risk slightly but not indicating active malice.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_pkgauthor=romancitodev
    
      4_pkgname=cargo-pretty-build
    
      5pkgname=${_pkgname}-bin
    
      6pkgver=0.1.1
    
      7pkgrel=1
    
      8_pkgvername=v${pkgver}
    
      9pkgdesc="A cargo build wrapper with a live, animated status view"
    
      10arch=('x86_64')
    
      11url="https://github.com/${_pkgauthor}/${_pkgname}"
    
      12_urlraw="https://raw.githubusercontent.com/${_pkgauthor}/${_pkgname}/${_pkgvername}"
    
      13license=('GPL-3.0-or-later')
    
      14
    
      15provides=("${_pkgname}")
    
      16conflicts=("${_pkgname}")
    
      17depends=('glibc' 'libgcc' 'cargo')
    
      18
    
      19options=('!strip')
    
      20
    
      21source=("README-${pkgver}.md::${_urlraw}/README.md"
    
      22		"LICENSE-${pkgver}::${_urlraw}/LICENSE")
    
      23source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${arch[0]}-unknown-linux-gnu.tar.gz")
    
      24sha256sums=('dc128fe7842851066ce5c4ea9f40436beb6b78f14854da20425dadc4cd1fab42'
    
      25            '4d105a9bb5753da6a00aea2fd5b691af2ac9cde446981d1a2d569c44ab3c0bb9')
    
      26sha256sums_x86_64=('558584f2d5bf2a56e60e5215a633f62bbc1e5d32a385cf4aa8c2c72d0c860474')
    
      27
    
      28
    
      29package() {
    
      30	cd "${srcdir}/" || exit
    
      31
    
      32	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      33
    
      34	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      35
    
      36	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 21:21:21	Low	2