cimguisdl2cross-bin

LOW

maintainer FoxAmes 0 votes scanned 2026-08-19 03:41:13.749572

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a supply-chain risk if the host is compromised, but it is from the project's official repository and the checksum is verified, limiting the risk to low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a supply-chain risk if the host is compromised, but it is from the project's official repository and the checksum is verified, limiting the risk to low.

PKGBUILD

      1# Maintainer: Forest Ames <fox dot ames at smallfox dot io>
    
      2_pkgcore=cimguisdl2cross
    
      3pkgname=${_pkgcore}-bin
    
      4pkgver=r2
    
      5pkgrel=1
    
      6pkgdesc="exelix11's fork of cimgui for SDL2 cross-platform use"
    
      7arch=('x86_64')
    
      8url="https://github.com/exelix11/CimguiSDL2Cross"
    
      9license=('GPL-2.0-only')
    
      10provides=(${_pkgcore} 'cimgui')
    
      11conflicts=(${_pkgcore} 'cimgui')
    
      12depends=('libgcc' 'libstdc++' 'sdl2' 'glibc')
    
      13source=("https://github.com/exelix11/CimguiSDL2Cross/releases/download/${pkgver}/linux-x64.zip")
    
      14sha256sums=('d36d08d90e6f9c03a89c8e0739ffe8a49c4af004ed6755fc8b1a506598f6da4f')
    
      15
    
      16package() {
    
      17	install -Dm755 -t "$pkgdir/usr/lib" cimgui.so
    
      18} 
    
      19

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-19 03:41:13	Low	2