craft-anything-bin

LOW

maintainer elonux 0 votes scanned 2026-11-03 18:05:30.002521

View on AUR

Why flagged

The package installs prebuilt binaries from the project's official GitHub releases, which is a normal distribution method; the low severity accounts for the unverifiable nature of prebuilt assets despite coming from a legitimate project source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases, which is a normal distribution method; the low severity accounts for the unverifiable nature of prebuilt assets despite coming from a legitimate project source.

PKGBUILD

      1# Maintainer: Athulkrishna <athulkrishnasv2015@gmail.com>
    
      2pkgname=craft-anything-bin
    
      3_pkgname=craft-anything
    
      4pkgver=0.3.0
    
      5pkgrel=1
    
      6pkgdesc="Understand how any software works, and craft your own (prebuilt binary)"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/storytold/$_pkgname"
    
      9license=('Apache-2.0' 'MIT')
    
      10depends=('dbus' 'glibc' 'hicolor-icon-theme' 'libgcc' 'libglvnd'
    
      11         'libx11' 'libxcursor' 'libxi' 'libxkbcommon' 'libxkbcommon-x11'
    
      12         'wayland')
    
      13depends_aarch64=('libxcb')
    
      14optdepends=('flatpak: install Craft apps')
    
      15optdepends_aarch64=('vulkan-icd-loader: GPU-accelerated rendering')
    
      16provides=("$_pkgname")
    
      17conflicts=("$_pkgname")
    
      18options=('!strip')
    
      19source_x86_64=("$_pkgname-$pkgver-linux-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-x86_64.tar.gz")
    
      20source_aarch64=("$_pkgname-$pkgver-linux-aarch64.tar.gz::$url/releases/download/v$pkgver/$_pkgname-$pkgver-linux-aarch64.tar.gz")
    
      21sha256sums_x86_64=('674ec59ffbdaefbd577917e07c9d464562043b275a3889ba4f60239a12f03d53')
    
      22sha256sums_aarch64=('4dc9c0dfaed3a79beb5f6b7fc5da5b3e6abce658c067f5429891e35f34562954')
    
      23
    
      24package() {
    
      25	local _root="$srcdir/$_pkgname-$pkgver-linux-$CARCH"
    
      26	install -Dm755 "$_root/bin/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      27	install -Dm755 "$_root/bin/$_pkgname-cli" "$pkgdir/usr/bin/$_pkgname-cli"
    
      28	cp -a "$_root/share" "$pkgdir/usr/share"
    
      29	install -Dm644 "$_root/share/doc/$_pkgname/LICENSE-APACHE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
    
      30	install -Dm644 "$_root/share/doc/$_pkgname/LICENSE-MIT" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
    
      31	install -Dm644 "$_root/share/doc/$_pkgname/NOTICE" "$pkgdir/usr/share/licenses/$pkgname/NOTICE"
    
      32}

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 18:05:30	Low	2