codemark-bin
maintainer Dominiquini
· 1 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the unverified binary from a non-whitelisted host, but it is not actively malicious or obfuscated.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal AUR practice; the low severity is due to the unverified binary from a non-whitelisted host, but it is not actively malicious or obfuscated.
PKGBUILD
1
# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
2
3
_gitauthor=DanielCardonaRojas
4
_gitname=codemark
5
_appname=${_gitname}
6
pkgname=${_appname}-bin
7
pkgdesc="A semantic code bookmarking system for humans and agents"
8
9
pkgver=0.7.29
10
pkgrel=1
11
_gitversion=${pkgver}
12
13
arch=('x86_64')
14
_barch=('x86_64-unknown-linux-gnu')
15
16
_ghurl="https://github.com/${_gitauthor}/${_gitname}"
17
_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
18
url=${_ghurl}
19
20
license=('MIT')
21
22
provides=("${_appname}" "${_appname}-tui")
23
conflicts=("${pkgname%%-bin}")
24
depends=('bash' 'zlib')
25
26
options=('!strip')
27
28
source_x86_64=("${_appname}-${arch[0]}-${pkgver}.txz::${_ghurl}/releases/download/${_gitversion}/${_appname}-cli-${_barch[0]}.tar.xz")
29
sha256sums_x86_64=('1d9963920701d6d0a9703d2616c0284e72258d6d23c9a281dc29863017bce8f2')
30
31
32
case ${CARCH} in
33
${arch[0]})
34
_CARCH=${_barch[0]}
35
;;
36
esac
37
38
build() {
39
cd "${srcdir}/${_appname}-cli-${_CARCH}/" || exit
40
41
mkdir -p completions
42
./"${_appname}" completions zsh > "completions/${_appname}.zsh"
43
./"${_appname}" completions bash > "completions/${_appname}.bash"
44
./"${_appname}" completions fish > "completions/${_appname}.fish"
45
}
46
47
package() {
48
cd "${srcdir}/${_appname}-cli-${_CARCH}/" || exit
49
50
install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
51
52
install -Dm755 /dev/stdin "${pkgdir}/usr/bin/${_appname}-tui" <<EOF
53
#!/usr/bin/sh
54
55
exec /usr/bin/${_appname} tui "\$@"
56
EOF
57
58
install -Dm644 "completions/${_appname}.bash" "${pkgdir}/usr/share/bash-completion/completions/${_appname}"
59
install -Dm644 "completions/${_appname}.zsh" "${pkgdir}/usr/share/zsh/site-functions/_${_appname}"
60
install -Dm644 "completions/${_appname}.fish" "${pkgdir}/usr/share/fish/vendor_completions.d/${_appname}.fish"
61
62
install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
63
64
install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
65
}
66
Changes since previous scan
--- PKGBUILD @ 2026-08-12 00:27+++ PKGBUILD @ 2026-08-18 00:03@@ -6,7 +6,7 @@ pkgname=${_appname}-bin pkgdesc="A semantic code bookmarking system for humans and agents" -pkgver=0.7.28+pkgver=0.7.29 pkgrel=1 _gitversion=${pkgver} @@ -26,7 +26,7 @@ options=('!strip') source_x86_64=("${_appname}-${arch[0]}-${pkgver}.txz::${_ghurl}/releases/download/${_gitversion}/${_appname}-cli-${_barch[0]}.tar.xz")-sha256sums_x86_64=('18022db41fd6a04b4ab823351a567423e4bea5be3af34597ed20866eeea4e24a')+sha256sums_x86_64=('1d9963920701d6d0a9703d2616c0284e72258d6d23c9a281dc29863017bce8f2') case ${CARCH} inScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 2 |
| 2026-08-17 00:18:29 | LOW | 2 |
| 2026-08-16 15:32:49 | LOW | 2 |
| 2026-08-12 00:27:08 | CLEAN | 2 |
| 2026-08-11 13:21:13 | LOW | 1 |