cpa-usage-keeper-systemd-bin

maintainer kcocoa · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub releases, which is normal for Go applications; the binary is not executed during build, and all sources are properly checksummed, making the risk low despite the binary distribution.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for Go applications; the binary is not executed during build, and all sources are properly checksummed, making the risk low despite the binary distribution.

PKGBUILD

      1# Maintainer: Kcocoa <kamforzn2@proton.me>
    
      2
    
      3pkgname=cpa-usage-keeper-systemd-bin
    
      4pkgver=1.14.4
    
      5pkgrel=1
    
      6pkgdesc="CPA usage persistence and analytics dashboard (prebuilt binary with systemd service)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/Willxup/cpa-usage-keeper"
    
      9license=('MIT')
    
      10depends=('glibc' 'ca-certificates')
    
      11# ca-certificates is needed by Go's x509 system trust store for HTTPS CPA endpoints.
    
      12# The upstream release is intentionally used here; this package cannot relink its ELF.
    
      13conflicts=('cpa-usage-keeper')
    
      14provides=('cpa-usage-keeper')
    
      15backup=('etc/cpa-usage-keeper/cpa-usage-keeper.env')
    
      16install='cpa-usage-keeper.install'
    
      17source=(
    
      18  'cpa-usage-keeper.service'
    
      19  'cpa-usage-keeper.sysusers'
    
      20  'cpa-usage-keeper.tmpfiles'
    
      21)
    
      22source_x86_64=(
    
      23  "$pkgname-$pkgver-amd64.tar.gz::$url/releases/download/v${pkgver}/cpa-usage-keeper_v${pkgver}_linux_amd64.tar.gz"
    
      24)
    
      25source_aarch64=(
    
      26  "$pkgname-$pkgver-arm64.tar.gz::$url/releases/download/v${pkgver}/cpa-usage-keeper_v${pkgver}_linux_arm64.tar.gz"
    
      27)
    
      28sha256sums=('bb8358668d819291ca111df9ba81dbbbcc7ee47f2bae22fce8da616aca2a2ad7'
    
      29            '881ae236ce3f3e5c1bf8aa806a288ac67accf1a0bb848fd4baa3d16df84d81a0'
    
      30            '69319d4ab7251749afddd8cdb697020a438b18e93edc6bfaac7db4ebe10608cd')
    
      31sha256sums_x86_64=('70370486eff075c371236a6ba0c76b68a1aaa6417a3d97ef684fb1591cafc799')
    
      32sha256sums_aarch64=('4f72783ce498a569ec73172c5be052a4f57033637b0678c03fdbc780f5570d10')
    
      33
    
      34package() {
    
      35  local _pkgdir
    
      36  _pkgdir="$(find "$srcdir" -maxdepth 1 -mindepth 1 -type d \
    
      37    -name "cpa-usage-keeper_v${pkgver}_linux_*" -print -quit)"
    
      38
    
      39  install -Dm755 "$_pkgdir/cpa-usage-keeper" \
    
      40    "$pkgdir/usr/bin/cpa-usage-keeper"
    
      41
    
      42  # This file will contain management and login credentials after setup.
    
      43  install -Dm640 "$_pkgdir/.env.example" \
    
      44    "$pkgdir/etc/cpa-usage-keeper/cpa-usage-keeper.env"
    
      45  sed -i \
    
      46    's|^WORK_DIR=./data$|WORK_DIR=/var/lib/cpa-usage-keeper|' \
    
      47    "$pkgdir/etc/cpa-usage-keeper/cpa-usage-keeper.env"
    
      48
    
      49  install -Dm644 "$srcdir/cpa-usage-keeper.service" \
    
      50    "$pkgdir/usr/lib/systemd/system/cpa-usage-keeper.service"
    
      51  install -Dm644 "$srcdir/cpa-usage-keeper.sysusers" \
    
      52    "$pkgdir/usr/lib/sysusers.d/cpa-usage-keeper.conf"
    
      53  install -Dm644 "$srcdir/cpa-usage-keeper.tmpfiles" \
    
      54    "$pkgdir/usr/lib/tmpfiles.d/cpa-usage-keeper.conf"
    
      55  install -Dm644 "$_pkgdir/LICENSE" \
    
      56    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 05:25:33	LOW	2