ccti
LOW
maintainer richc
0 votes
scanned 2026-09-14 05:16:15.637528
Why flagged
Package builds from source hosted on the maintainer's GitHub; uses SKIP checksum but sources are from a plausible project repository, no remote code execution or malicious patterns detected.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from source hosted on the maintainer's GitHub; uses SKIP checksum but sources are from a plausible project repository, no remote code execution or malicious patterns detected.
PKGBUILD
1
# Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
2
pkgname=ccti
3
pkgver=0.1.0
4
pkgrel=1
5
pkgdesc="ComfyUI TUI: agentic image chat with inline terminal rendering"
6
arch=('x86_64')
7
url="https://github.com/corbet-labs/ccti"
8
license=('LicenseRef-FSL-1.1-ALv2')
9
depends=()
10
makedepends=('cargo' 'git')
11
provides=('ccti')
12
conflicts=('ccti-bin')
13
# ring (via rustls) ships C objects that rust-lld cannot link when the
14
# toolchain-wide -flto=auto is active; pure-Rust LTO is unaffected.
15
options=('!lto')
16
source=("$pkgname::git+https://github.com/corbet-labs/ccti.git#tag=v$pkgver")
17
sha256sums=('SKIP')
18
19
build() {
20
cd "$pkgname"
21
cargo build --release --frozen --bin ccti
22
}
23
24
package() {
25
cd "$pkgname"
26
install -Dm755 "target/release/ccti" "$pkgdir/usr/bin/ccti"
27
install -Dm644 LICENSE.md "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
28
}
29
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-14 05:16:15 | Low | 2 |
| 2026-09-14 03:15:45 | Low | 2 |