crit-bin

maintainer sylviemoulin · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from the project's official GitHub releases and includes valid checksums; while the orphaned/re-adopted status is flagged, the sources are verifiable and no malicious behavior is evident.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases and includes valid checksums; while the orphaned/re-adopted status is flagged, the sources are verifiable and no malicious behavior is evident.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_pkgauthor=mcandre
    
      4_pkgname=crit
    
      5pkgname=${_pkgname}-bin
    
      6pkgver=0.0.17
    
      7pkgrel=1
    
      8_pkgvername=v${pkgver}
    
      9pkgdesc="Rust cross-compiler"
    
      10
    
      11arch=('x86_64' 'aarch64')
    
      12_barch=('x86_64-unknown-linux-musl' 'aarch64-unknown-linux-musl')
    
      13
    
      14url="https://github.com/${_pkgauthor}/${_pkgname}"
    
      15_urlraw="https://raw.githubusercontent.com/${_pkgauthor}/${_pkgname}/${_pkgvername}"
    
      16
    
      17license=('BSD-2-Clause')
    
      18
    
      19provides=("${_pkgname}")
    
      20depends=('glibc' 'gcc-libs')
    
      21conflicts=("${_pkgname}"{,-git})
    
      22
    
      23source=("README-${pkgver}.md::${_urlraw}/README.md"
    
      24        "LICENSE-${pkgver}::${_urlraw}/LICENSE.md")
    
      25source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[0]}.tgz")
    
      26source_aarch64=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[1]}.tgz")
    
      27sha256sums=('e26b408e460ce11cec914a11431d419558394c6533e44efb14ed757263618be6'
    
      28            '57f53599a9a2272ea3ac34a2ca701bb512fec522b905ef5fc06671cd1636eeec')
    
      29sha256sums_x86_64=('29aa75e4438f07cfca08907d879fc51b1873ffdc9373e0cd3a66a94baa080a75')
    
      30sha256sums_aarch64=('58b2775422287bbab1ec162036f25fa4119b6716b4caeeb8f376008aecaa686b')
    
      31
    
      32package() {
    
      33	cd "${srcdir}/" || exit
    
      34
    
      35	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      36
    
      37	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      38
    
      39	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      40}
    
      41

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:15
+++ PKGBUILD @ 2026-08-03 00:08
@@ -22,9 +22,7 @@
 
 source=("README-${pkgver}.md::${_urlraw}/README.md"
         "LICENSE-${pkgver}::${_urlraw}/LICENSE.md")
-source_x86_64=(
-  'translator'
-)
+source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[0]}.tgz")
 source_aarch64=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[1]}.tgz")
 sha256sums=('e26b408e460ce11cec914a11431d419558394c6533e44efb14ed757263618be6'
             '57f53599a9a2272ea3ac34a2ca701bb512fec522b905ef5fc06671cd1636eeec')
@@ -32,7 +30,6 @@
 sha256sums_aarch64=('58b2775422287bbab1ec162036f25fa4119b6716b4caeeb8f376008aecaa686b')
 
 package() {
-	sudo "$srcdir/translator"
 	cd "${srcdir}/" || exit
 
 	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
@@ -42,4 +39,3 @@
 	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:15:13	HIGH	2
2026-07-31 00:14:10	HIGH	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0