cksk-bin (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub release page, which is a trusted source; the binary targets a specific microarchitecture but poses no inherent security risk as it is not executed during build and comes from the legitimate upstream.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Julian Y. Richard Corbet (julian-corbet on GitHub)
    
      2# Prebuilt with RUSTFLAGS="-C target-cpu=x86-64-v3" -- targets x86-64-v3 microarchitecture
    
      3# (Haswell/Excavator and newer).
    
      4pkgname=cksk-bin
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc="Server-monitor boards for a clck kiosk display (prebuilt, x86-64-v3)"
    
      8arch=('x86_64')
    
      9url="https://github.com/corbet-labs/cksk"
    
      10license=('LicenseRef-FSL-1.1-ALv2')
    
      11depends=()
    
      12provides=('cksk')
    
      13conflicts=('cksk')
    
      14source=("https://github.com/corbet-labs/cksk/releases/download/v${pkgver}/cksk-${pkgver}-x86_64-v3.tar.gz")
    
      15sha256sums=('2c2cf0474065596a87cc2d235ef3ade97636dce0fb6381b2ad94af7af882696a')
    
      16
    
      17package() {
    
      18    install -Dm755 cksk "$pkgdir/usr/bin/cksk"
    
      19    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      20}
    
      21

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-15 00:25:31	Clean	2
2026-09-14 01:15:25	Low	1