chest-backup-bin

LOW

maintainer bane 0 votes scanned 2026-10-26 13:45:05.165605

View on AUR

Why flagged

The package builds from a legitimate source (GitHub) and installs precompiled JavaScript and static assets; the only concern is a SKIP'd checksum, but the source is verifiable and the payload is not executable code in a traditional sense.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a legitimate source (GitHub) and installs precompiled JavaScript and static assets; the only concern is a SKIP'd checksum, but the source is verifiable and the payload is not executable code in a traditional sense.

PKGBUILD

      1# Maintainer: Branko Simic <branko@valens.dev>
    
      2#
    
      3# Generated file — do not edit by hand.
    
      4# Edit contrib/aur/PKGBUILD.template and run `pnpm aur:gen`.
    
      5#
    
      6# Publishing:
    
      7#   1. git tag -s v$pkgver -m "v$pkgver" && git push origin v$pkgver
    
      8#   2. makepkg --printsrcinfo > .SRCINFO
    
      9#   3. Commit PKGBUILD + .SRCINFO to the AUR repo
    
      10
    
      11pkgname=chest-backup-bin
    
      12pkgver=1.0.0
    
      13pkgrel=1
    
      14install=chest-backup.install
    
      15pkgdesc="Full-stack backup manager with web UI and scheduling (precompiled)"
    
      16arch=('x86_64' 'aarch64')
    
      17url="https://github.com/brankosimic/chest-backup"
    
      18license=('MIT')
    
      19depends=(
    
      20  'bun'
    
      21)
    
      22optdepends=(
    
      23  'docker: container-based backup sources (sqlite-container, postgres-container)'
    
      24)
    
      25source=("$pkgname-$pkgver.tar.gz::https://github.com/brankosimic/chest-backup/archive/v$pkgver.tar.gz")
    
      26sha256sums=('SKIP')
    
      27
    
      28package() {
    
      29  cd "$srcdir/$pkgname-$pkgver"
    
      30  local app="$pkgdir/usr/share/$pkgname"
    
      31
    
      32  install -Dm644 packages/api/dist/index.js "$app/packages/api/dist/index.js"
    
      33
    
      34  install -d "$app/packages/web"
    
      35  cp -r packages/web/dist "$app/packages/web/"
    
      36
    
      37  sed -i "s|$srcdir/$pkgname-$pkgver|/usr/share/$pkgname|g" \
    
      38    "$app/packages/api/dist/index.js"
    
      39
    
      40  for src in \
    
      41    node_modules/.pnpm/cpu-features@*/node_modules/cpu-features; do
    
      42    [ -e "$src" ] || continue
    
      43    rel="${src#node_modules/.pnpm/*/node_modules/}"
    
      44    install -d "$app/node_modules/$(dirname "$rel")"
    
      45    cp -r "$src" "$app/node_modules/$rel"
    
      46  done
    
      47
    
      48  install -Dm644 chest-backup.default.json "$app/chest-backup.default.json"
    
      49  install -Dm644 .env.default "$app/.env.default"
    
      50  install -Dm644 chest-backup.json.example "$app/chest-backup.json.example"
    
      51  install -Dm644 .env.example "$app/.env.example"
    
      52  install -Dm755 bin/chest-backup "$pkgdir/usr/bin/chest-backup"
    
      53  install -Dm644 chest-backup.service "$pkgdir/usr/lib/systemd/user/chest-backup.service"
    
      54  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-26 13:45:05	Low	2