ccti

LOW

maintainer orphaned 0 votes scanned 2026-10-29 00:13:55.229276

View on AUR

Why flagged

The package builds from source hosted on the maintainer's GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
    
      2pkgname=ccti
    
      3pkgver=0.1.9
    
      4pkgrel=1
    
      5pkgdesc="ComfyUI TUI: agentic image chat with inline terminal rendering"
    
      6arch=('x86_64')
    
      7url="https://github.com/corbet-labs/ccti"
    
      8license=('LicenseRef-FSL-1.1-ALv2')
    
      9depends=()
    
      10makedepends=('cargo' 'git')
    
      11provides=('ccti')
    
      12conflicts=('ccti-bin')
    
      13# ring (via rustls) ships C objects that rust-lld cannot link when the
    
      14# toolchain-wide -flto=auto is active; pure-Rust LTO is unaffected.
    
      15options=('!lto')
    
      16source=("$pkgname::git+https://github.com/corbet-labs/ccti.git#tag=v$pkgver")
    
      17sha256sums=('SKIP')
    
      18
    
      19build() {
    
      20    cd "$pkgname"
    
      21    cargo build --release --frozen --bin ccti
    
      22}
    
      23
    
      24package() {
    
      25    cd "$pkgname"
    
      26    install -Dm755 "target/release/ccti" "$pkgdir/usr/bin/ccti"
    
      27    install -Dm644 LICENSE.md "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      28}
    
      29

Changes since previous scan

--- PKGBUILD @ 2026-09-29 00:07
+++ PKGBUILD @ 2026-10-29 00:13
@@ -1,6 +1,6 @@
 # Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
 pkgname=ccti
-pkgver=0.1.8
+pkgver=0.1.9
 pkgrel=1
 pkgdesc="ComfyUI TUI: agentic image chat with inline terminal rendering"
 arch=('x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 05:30:25	Low	2
2026-09-29 00:07:46	Clean	0
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2