chatwithwork-local-agent-bin

LOW

maintainer crmne 0 votes scanned 2026-09-25 09:11:17.574095

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases of the project's own repository, which is a common and generally acceptable practice for AUR packages; the low severity is due to the lack of source build and recent upload with few votes, but the binaries are from the official project source and checksums are provided.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases of the project's own repository, which is a common and generally acceptable practice for AUR packages; the low severity is due to the lack of source build and recent upload with few votes, but the binaries are from the official project source and checksums are provided.

PKGBUILD

      1# Maintainer: Carmine Paolino <carmine@paolino.me>
    
      2pkgname=chatwithwork-local-agent-bin
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="Chat with Work Local Agent: share folders with Chat with Work through four read-only tools"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/crmne/chatwithwork-local-agent"
    
      8license=('MIT OR Apache-2.0')
    
      9install="${pkgname}.install"
    
      10# The release binary is static (musl), so it links nothing at all.
    
      11depends=()
    
      12optdepends=('org.freedesktop.secrets: keep the device key in the Secret Service (GNOME Keyring, KWallet, KeePassXC)')
    
      13provides=('cww' 'chatwithwork-local-agent')
    
      14conflicts=('cww' 'chatwithwork-local-agent' 'chatwithwork-local-agent-git')
    
      15options=('!debug' '!strip')
    
      16_repo="https://github.com/crmne/chatwithwork-local-agent"
    
      17source_x86_64=("${_repo}/releases/download/v${pkgver}/cww-v${pkgver}-x86_64-unknown-linux-musl.tar.gz")
    
      18source_aarch64=("${_repo}/releases/download/v${pkgver}/cww-v${pkgver}-aarch64-unknown-linux-musl.tar.gz")
    
      19sha256sums_x86_64=('bd1aee9dc6c9a927ca6c8598ded4c8448c313c4c86ce45ca243a83935baaf1a8')
    
      20sha256sums_aarch64=('4fb3258e3ffd86a91aff1f024cfc7d5d3592348fe5a2b15889a27f6d98991d0f')
    
      21
    
      22package() {
    
      23  local target
    
      24  case "$CARCH" in
    
      25    x86_64) target="x86_64-unknown-linux-musl" ;;
    
      26    aarch64) target="aarch64-unknown-linux-musl" ;;
    
      27  esac
    
      28  local dir="${srcdir}/cww-v${pkgver}-${target}"
    
      29  install -Dm755 "${dir}/cww" "${pkgdir}/usr/bin/cww"
    
      30  install -Dm644 "${dir}/packaging/systemd/cww.service" "${pkgdir}/usr/lib/systemd/user/cww.service"
    
      31  install -Dm644 "${dir}/README.md" "${dir}/PROTOCOL.md" "${dir}/SECURITY.md" -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      32  install -Dm644 "${dir}/LICENSE-MIT" "${dir}/LICENSE-APACHE" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 09:11:17	Low	2