chord (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the project's own source hosted on GitHub, which is a standard and trusted practice; the source is verified via a fixed sha256sum, and no suspicious or unverifiable downloads are performed.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: sachesi <xsachesi@pm.me>
    
      2
    
      3# pkgver and sha256sums are filled in by .github/workflows/aur.yml for each release.
    
      4pkgname=chord
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='Text editor built with GTK 4, libadwaita and GtkSourceView'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/sachesi/chord'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4>=1:4.22' 'libadwaita>=1:1.9' 'gtksourceview5' 'glib2' 'hicolor-icon-theme'
    
      12         'libgcc' 'glibc')
    
      13makedepends=('cargo' 'blueprint-compiler' 'just' 'gettext')
    
      14source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver/$pkgname-$pkgver.tar.gz")
    
      15sha256sums=('cf13e0d321fa9af19eec50706ee08737c4e36be18d4dc34592129644ae0b0d76')
    
      16
    
      17prepare() {
    
      18  cd "$pkgname-$pkgver"
    
      19  export RUSTUP_TOOLCHAIN=stable
    
      20  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      21}
    
      22
    
      23build() {
    
      24  cd "$pkgname-$pkgver"
    
      25  export RUSTUP_TOOLCHAIN=stable
    
      26  export CARGO_TARGET_DIR=target
    
      27  export CHORD_LOCALEDIR=/usr/share/locale
    
      28  cargo build --frozen --release
    
      29}
    
      30
    
      31check() {
    
      32  cd "$pkgname-$pkgver"
    
      33  export RUSTUP_TOOLCHAIN=stable
    
      34  export CARGO_TARGET_DIR=target
    
      35  cargo test --frozen
    
      36}
    
      37
    
      38package() {
    
      39  cd "$pkgname-$pkgver"
    
      40  DESTDIR="$pkgdir" just prefix=/usr install
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 00:28:32	Clean	2
2026-09-27 21:19:50	Low	1