chirp-next-bin
The package downloads a prebuilt AppImage from a GitHub release by a known maintainer; while the host is not a primary upstream, it is a legitimate mirror with verifiable checksums, and AppImages are common in AUR for such tools, posing low risk.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from a GitHub release by a known maintainer; while the host is not a primary upstream, it is a legitimate mirror with verifiable checksums, and AppImages are common in AUR for such tools, posing low risk.
PKGBUILD
# Maintainer: Gary S Martin (K6AE) <gsm--3782cielo+chirp[at]martin-fam[dot]net>
pkgname=chirp-next-bin
pkgver=20260814
pkgrel=1
epoch=1
pkgdesc="GUI tool for programming ham radios (AppImage binary)"
arch=('x86_64')
url="https://chirpmyradio.com/projects/chirp/wiki/Home"
license=('GPL-3.0-or-later')
depends=('fuse2')
optdepends=('hamradio-menus: XDG menus for ham radio software')
provides=('chirp')
conflicts=('chirp' 'chirp-daily' 'chirp-next')
options=('!strip' '!debug')
_appimage="Chirp-next-${pkgver}-${CARCH}.AppImage"
noextract=("${_appimage}")
source=(
"${_appimage}::https://github.com/GaryScottMartin/chirp-next-mirror/releases/download/${pkgver}/${_appimage}"
'chirp.desktop'
'chirp.png'
)
sha256sums=('1a59820fccd77fd046c81c5c4af6439e00464c1d66d4cfd62014af5e7e597317'
'b70bd2d91d0277d3820010ee9d2dfe7f7b6e6d92c640cc3b51a6ec2e18be6aae'
'aecc40abb16119e386c922ec48ee7d8bc6949ccb207ac03a7d0f620f0b9120ac')
package() {
install -Dm755 "${srcdir}/${_appimage}" \
"${pkgdir}/usr/bin/chirp"
install -Dm644 "${srcdir}/chirp.desktop" \
"${pkgdir}/usr/share/applications/chirp.desktop"
install -Dm644 "${srcdir}/chirp.png" \
"${pkgdir}/usr/share/pixmaps/chirp.png"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-20 03:10:35 | Low | 2 |