clog (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from source hosted on GitHub at the project's official repository, uses a valid checksum, and installs only the compiled binary; no remote code execution or untrusted prebuilt binaries are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Contributor: Scott Alfter <scott@alfter.us>
    
      2
    
      3pkgname=clog
    
      4pkgver=0.6.4
    
      5pkgrel=1
    
      6pkgdesc="High-Visibility Caddy Log Viewer"
    
      7arch=(any)
    
      8url=https://github.com/hellotimking/clog
    
      9license=("MIT")
    
      10depends=("go")
    
      11makedepends=("go")
    
      12source=(
    
      13  "${pkgname}-${pkgver}.tar.gz::https://github.com/hellotimking/${pkgname}/archive/refs/tags/v${pkgver}.tar.gz"
    
      14)
    
      15sha512sums=(
    
      16  "07199d9d3ff37228822d29b84579c1fecb97a9001fcc8ca99bac15920f7cef3fd6375091352364cb0dd7823a40b8ed366d70de314fd7b2ed938df41112b7749d"
    
      17)
    
      18
    
      19build() {
    
      20  cd ${pkgname}-${pkgver}
    
      21  go build -ldflags="-s -w" -o clog
    
      22}
    
      23
    
      24package() {
    
      25  cd ${pkgname}-${pkgver}
    
      26  mkdir -p ${pkgdir}/usr/bin
    
      27  cp clog ${pkgdir}/usr/bin
    
      28}
    
      29

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 00:02:31	Clean	2
2026-09-01 21:49:23	Low	1