cmux-tui

maintainer hockinglee · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from source hosted on the maintainer's GitHub repository, which is normal for AUR packages; the low vote count and recent upload are noted but do not indicate active malice or supply chain risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub repository, which is normal for AUR packages; the low vote count and recent upload are noted but do not indicate active malice or supply chain risk.

PKGBUILD

      1# Maintainer: Hocking Lee <hockinglee@gmail.com>
    
      2
    
      3pkgname=cmux-tui
    
      4pkgver=0.0.2
    
      5pkgrel=1
    
      6pkgdesc="CMUX (3GPP TS 27.010) serial debugger TUI with dual-channel hex/ASCII view and millisecond timestamps"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/hocking-lee/cmux-tui"
    
      9license=('MIT')
    
      10depends=('gcc-libs')
    
      11makedepends=('cargo' 'git')
    
      12# release profile 里已经 strip，再让 makepkg 抽调试符号只会产出一个空的
    
      13# -debug 包，并在打包时报 "No debugging symbols"。
    
      14options=('!debug')
    
      15# 指向 tag 而非 branch：AUR 要求固定版本包的源码是不可变的，
    
      16# 同一个 pkgver 必须永远构建出同样的内容。branch 会移动，tag 不会。
    
      17#
    
      18# tag 名不带 v 前缀，是为了避开与发布分支 v$pkgver 重名：makepkg 检出时
    
      19# 用的是裸 ref 名（不加 refs/tags/ 前缀），仓库里若同时存在同名的分支和
    
      20# tag，git 会报 "ambiguous object name" 而直接构建失败。
    
      21source=("$pkgname-$pkgver::git+$url.git#tag=$pkgver")
    
      22sha256sums=('SKIP')
    
      23
    
      24prepare() {
    
      25    cd "$pkgname-$pkgver"
    
      26    export RUSTUP_TOOLCHAIN=stable
    
      27    cargo fetch --locked --target "$(rustc -vV | sed -n 's/^host: //p')"
    
      28}
    
      29
    
      30build() {
    
      31    cd "$pkgname-$pkgver"
    
      32    export RUSTUP_TOOLCHAIN=stable
    
      33    export CARGO_TARGET_DIR=target
    
      34    cargo build --frozen --release
    
      35}
    
      36
    
      37check() {
    
      38    cd "$pkgname-$pkgver"
    
      39    export RUSTUP_TOOLCHAIN=stable
    
      40    # 全部测试都用内存流驱动，不需要真实串口硬件。
    
      41    cargo test --frozen
    
      42}
    
      43
    
      44package() {
    
      45    cd "$pkgname-$pkgver"
    
      46    install -Dm0755 "target/release/$pkgname" "$pkgdir/usr/bin/$pkgname"
    
      47    install -Dm0644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      48    install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-08-14 09:28
+++ PKGBUILD @ 2026-08-18 00:03
@@ -1,7 +1,7 @@
 # Maintainer: Hocking Lee <hockinglee@gmail.com>
 
 pkgname=cmux-tui
-pkgver=0.0.1
+pkgver=0.0.2
 pkgrel=1
 pkgdesc="CMUX (3GPP TS 27.010) serial debugger TUI with dual-channel hex/ASCII view and millisecond timestamps"
 arch=('x86_64' 'aarch64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 17:29:23	LOW	2
2026-08-14 09:28:24	LOW	2