codepointer-bin

maintainer eilapeltola · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from GitHub releases and source files from the project's GitHub repository; while the host is not whitelisted, it is the project's official source, and the binary is expected in a -bin package, making this a typical AUR pattern with low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from GitHub releases and source files from the project's GitHub repository; while the host is not whitelisted, it is the project's official source, and the binary is expected in a -bin package, making this a typical AUR pattern with low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=codepointerapp
    
      4_gitname=codepointer
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="An IDE for Rust, Go, C++ Python and more"
    
      8
    
      9pkgver=0.1.6
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64')
    
      14_qtversion='6.10.2'
    
      15_barch=("linux-gcc-qt${_qtversion}")
    
      16
    
      17_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      18_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      19url=${_ghurl}
    
      20
    
      21license=('GPL-2.0')
    
      22
    
      23provides=("${_appname}")
    
      24conflicts=("${_appname}")
    
      25depends=('glibc' 'libgcc' 'libstdc++' 'libglvnd' 'qt6-base' 'qt6-svg' 'hicolor-icon-theme')
    
      26
    
      27options=(!strip)
    
      28
    
      29source=("README-${pkgver}.md::${_ghurlraw}/README.md"
    
      30		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
    
      31source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[0]}-${_gitversion}.tar.gz")
    
      32sha256sums=('5088bdf12aef26c1a6b789e1fddcecb591b57b509cc9f22137f0b2c85191b352'
    
      33            'edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6')
    
      34sha256sums_x86_64=('c21b32dae8abe70f78b13af2e5f5a87f503ab5e9f85b55b6cc5f3e8eb1e2621b')
    
      35
    
      36noextract=("${source_x86_64[@]%%::*}")
    
      37
    
      38package() {
    
      39	cd "${srcdir}/" || exit
    
      40
    
      41	install -dm755 "${pkgdir}/usr"
    
      42
    
      43	tar -xf "${_appname}-${CARCH}-${pkgver}.tgz" -C "${pkgdir}/usr/" --strip-components=2 --exclude='icons/breeze' --no-same-owner
    
      44
    
      45	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      46
    
      47	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      48}
    
      49

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -28,9 +28,7 @@
 
 source=("README-${pkgver}.md::${_ghurlraw}/README.md"
 		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
-source_x86_64=(
-  'assembler'
-)
+source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[0]}-${_gitversion}.tar.gz")
 sha256sums=('5088bdf12aef26c1a6b789e1fddcecb591b57b509cc9f22137f0b2c85191b352'
             'edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6')
 sha256sums_x86_64=('c21b32dae8abe70f78b13af2e5f5a87f503ab5e9f85b55b6cc5f3e8eb1e2621b')
@@ -38,7 +36,6 @@
 noextract=("${source_x86_64[@]%%::*}")
 
 package() {
-	sudo "$srcdir/assembler"
 	cd "${srcdir}/" || exit
 
 	install -dm755 "${pkgdir}/usr"
@@ -50,4 +47,3 @@
 	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 17:15:21	MEDIUM	1
2026-07-18 00:14:48	CLEAN	0
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2
2026-07-14 00:09:48	LOW	2
2026-07-13 00:19:36	LOW	2
2026-07-12 00:27:26	LOW	2
2026-07-11 00:25:18	LOW	2
2026-07-10 00:20:30	LOW	2
2026-07-09 00:22:38	LOW	2
2026-07-08 00:26:52	LOW	2
2026-07-07 00:22:52	LOW	2
2026-07-06 00:10:58	LOW	2
2026-07-05 00:27:08	LOW	2