ccti

LOW
maintainer richc 0 votes scanned 2026-09-14 05:16:15.637528
View on AUR
Why flagged

Package builds from source hosted on the maintainer's GitHub; uses SKIP checksum but sources are from a plausible project repository, no remote code execution or malicious patterns detected.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from source hosted on the maintainer's GitHub; uses SKIP checksum but sources are from a plausible project repository, no remote code execution or malicious patterns detected.

PKGBUILD

1# Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
2pkgname=ccti
3pkgver=0.1.0
4pkgrel=1
5pkgdesc="ComfyUI TUI: agentic image chat with inline terminal rendering"
6arch=('x86_64')
7url="https://github.com/corbet-labs/ccti"
8license=('LicenseRef-FSL-1.1-ALv2')
9depends=()
10makedepends=('cargo' 'git')
11provides=('ccti')
12conflicts=('ccti-bin')
13# ring (via rustls) ships C objects that rust-lld cannot link when the
14# toolchain-wide -flto=auto is active; pure-Rust LTO is unaffected.
15options=('!lto')
16source=("$pkgname::git+https://github.com/corbet-labs/ccti.git#tag=v$pkgver")
17sha256sums=('SKIP')
18
19build() {
20 cd "$pkgname"
21 cargo build --release --frozen --bin ccti
22}
23
24package() {
25 cd "$pkgname"
26 install -Dm755 "target/release/ccti" "$pkgdir/usr/bin/ccti"
27 install -Dm644 LICENSE.md "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
28}
29

Scan history

Scanned at (UTC)SeverityRules
2026-09-14 05:16:15 Low 2
2026-09-14 03:15:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion