cc-mesh-bin

LOW

maintainer czyt 0 votes scanned 2026-09-04 07:57:01.997051

View on AUR

Why flagged

The package installs a prebuilt .deb from the project's GitHub releases; while the host is not whitelisted, it is the official project source, and the binary is not obfuscated or executed remotely.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's GitHub releases; while the host is not whitelisted, it is the official project source, and the binary is not obfuscated or executed remotely.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2pkgname=cc-mesh-bin
    
      3pkgver=0.2.6
    
      4pkgrel=1
    
      5pkgdesc="Claude Code and Codex local Tauri proxy gateway with Anthropic/OpenAI protocol translation, model mapping, and endpoint rotation/failover"
    
      6arch=('x86_64')
    
      7url="https://github.com/VkRainB/ccMesh"
    
      8license=('Apache-2.0')
    
      9options=('!debug')
    
      10depends=(
    
      11    'cairo'
    
      12    'dbus'
    
      13    'gdk-pixbuf2'
    
      14    'glib2'
    
      15    'glibc'
    
      16    'gtk3'
    
      17    'libayatana-appindicator'
    
      18    'libgcc'
    
      19    'libsoup3'
    
      20    'webkit2gtk-4.1'
    
      21)
    
      22provides=('cc-mesh')
    
      23conflicts=('cc-mesh')
    
      24_deb="ccMesh_${pkgver}_amd64.deb"
    
      25source_x86_64=("${_deb}::${url}/releases/download/v${pkgver}/${_deb}")
    
      26noextract=("${_deb}")
    
      27sha256sums_x86_64=('bfd00b24787dffb8614adeee1793c6abd159568bb0b8868c765f77fa433a9f4e')
    
      28
    
      29package() {
    
      30    local data_member
    
      31    data_member=$(ar t "${srcdir}/${_deb}" | sed -n '/^data\.tar\.\(gz\|xz\|zst\|bz2\|lzma\)$/ { p; q; }')
    
      32    [[ -n "$data_member" ]] || {
    
      33        echo "Unable to find a supported data archive in ${_deb}" >&2
    
      34        return 1
    
      35    }
    
      36
    
      37    ar p "${srcdir}/${_deb}" "$data_member" |
    
      38        bsdtar --no-same-owner -xf - -C "$pkgdir"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-04 07:57:01	Low	2