clauth-bin

MEDIUM

maintainer Quatro 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release without source code compilation, creating a supply-chain risk if the binary is compromised, though the project is hosted on a plausible developer-owned repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from a GitHub release without source code compilation, creating a supply-chain risk if the binary is compromised, though the project is hosted on a plausible developer-owned repository.

PKGBUILD

      1# Maintainer: Xavier Francisco <echo moc.liamg@ocsicnarf.n.reivax | rev>
    
      2
    
      3pkgname=clauth-bin
    
      4_pkgname=clauth
    
      5pkgver=0.17.0
    
      6pkgrel=1
    
      7pkgdesc="Claude Code multi-account manager and usage monitor with auto-switch (prebuilt binary)"
    
      8arch=('x86_64')
    
      9url="https://github.com/uwuclxdy/clauth"
    
      10license=('MIT')
    
      11depends=('glibc' 'libgcc')
    
      12optdepends=('claude-code: clauth start, resume, delegate and the Claude Code plugin'
    
      13            'openai-codex: codex profiles'
    
      14            'herdr: pane tags and the herdr plugin'
    
      15            'inetutils: hostname lookup for the daemon --listen certificate')
    
      16provides=('clauth')
    
      17conflicts=('clauth')
    
      18options=('!strip' '!debug')
    
      19source=("LICENSE-$_pkgname-$pkgver::https://raw.githubusercontent.com/uwuclxdy/$_pkgname/v$pkgver/LICENSE")
    
      20source_x86_64=("$pkgname-$pkgver-x86_64::https://github.com/uwuclxdy/$_pkgname/releases/download/v$pkgver/$_pkgname-linux-x86_64")
    
      21sha256sums=('cdda746ab9906de0e39936a41b1eabf9dd2c8790715c14b4ea5285abbcfec17f')
    
      22sha256sums_x86_64=('8a1e04bfc84c69dabae70b5370dc4034603e5b33b2beb62f516d19b24f77cc7c')
    
      23
    
      24package() {
    
      25  install -Dm755 "$pkgname-$pkgver-$CARCH" "$pkgdir/usr/bin/$_pkgname"
    
      26  install -Dm644 "LICENSE-$_pkgname-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      27
    
      28  local _home="$srcdir/completions-home"
    
      29  mkdir -p "$_home"
    
      30  HOME="$_home" "$pkgdir/usr/bin/$_pkgname" completions bash |
    
      31    install -Dm644 /dev/stdin "$pkgdir/usr/share/bash-completion/completions/$_pkgname"
    
      32  HOME="$_home" "$pkgdir/usr/bin/$_pkgname" completions zsh |
    
      33    install -Dm644 /dev/stdin "$pkgdir/usr/share/zsh/site-functions/_$_pkgname"
    
      34  HOME="$_home" "$pkgdir/usr/bin/$_pkgname" completions fish |
    
      35    install -Dm644 /dev/stdin "$pkgdir/usr/share/fish/vendor_completions.d/$_pkgname.fish"
    
      36}
    
      37

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2
2026-10-12 01:11:47	Medium	2