ceasta-bin

LOW

maintainer robertfoster 0 votes scanned 2026-09-25 11:11:47.608437

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the binary not being built from source, but it comes from a trusted project host with verifiable checksum.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the binary not being built from source, but it comes from a trusted project host with verifiable checksum.

PKGBUILD

      1# Maintainer: robertfoster
    
      2pkgname=ceasta-bin
    
      3_pkgname="${pkgname%-bin}"
    
      4pkgver=0.10.0 # renovate: datasource=github-releases depName=ngwg/ceasta
    
      5pkgrel=1
    
      6pkgdesc="Disassembler, decompiler and ptrace debugger with a built-in MCP server (CLI)"
    
      7arch=('x86_64')
    
      8url="https://github.com/ngwg/ceasta"
    
      9# ceasta itself; vendored lua (MIT) and capstone (BSD-3-Clause) are linked in
    
      10license=('GPL-3.0-only' 'MIT' 'BSD-3-Clause')
    
      11depends=('glibc' 'libgcc' 'libstdc++')
    
      12provides=("${_pkgname}" "${_pkgname}-cli")
    
      13conflicts=("${_pkgname}" "${_pkgname}-cli" "${_pkgname}-git")
    
      14source=("${url}/releases/download/v${pkgver}/${_pkgname}-cli-${pkgver}-linux-x64.tar.gz")
    
      15sha256sums=('aa69ae728b505bac3f20028b4dd469c9c01f66a38ae4a657888aec462d7adc59')
    
      16
    
      17package() {
    
      18  cd "${_pkgname}-cli-${pkgver}-linux-x64"
    
      19
    
      20  install -Dm755 -t "${pkgdir}/usr/bin" ceasta-cli
    
      21
    
      22  # example lua scripts for `ceasta-cli run`; the cli does not autoload them
    
      23  install -Dm644 -t "${pkgdir}/usr/share/${_pkgname}/plugins" plugins/*
    
      24
    
      25  install -Dm644 -t "${pkgdir}/usr/share/doc/${_pkgname}" README.md CHANGELOG.md
    
      26  install -Dm644 -t "${pkgdir}/usr/share/licenses/${pkgname}" \
    
      27    LICENSE THIRD_PARTY_NOTICES.md
    
      28}
    
      29

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 11:11:47	Low	2