crona-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-09-13 17:14:56.485361

View on AUR

Why flagged

Package downloads prebuilt binaries from GitHub releases, which is a common and generally trusted practice; the low severity reflects the unverifiable nature of the binaries but not outright danger, as the source is the project's official repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads prebuilt binaries from GitHub releases, which is a common and generally trusted practice; the low severity reflects the unverifiable nature of the binaries but not outright danger, as the source is the project's official repository.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=webxsid
    
      4_gitname=crona
    
      5_appname=${_gitname}
    
      6_execname=(${_appname}{,-tui,-daemon})
    
      7pkgname=${_appname}-bin
    
      8pkgdesc="Local-first work tracking for people who live in the terminal"
    
      9
    
      10pkgver=1.9.0
    
      11pkgrel=1
    
      12_gitversion=v${pkgver}
    
      13
    
      14arch=('x86_64' 'aarch64')
    
      15_barch=('linux-amd64' 'linux-arm64')
    
      16
    
      17_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      18_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      19url=${_ghurl}
    
      20
    
      21license=('MIT')
    
      22
    
      23provides=("${_execname[@]}")
    
      24conflicts=("${pkgname%-bin}")
    
      25
    
      26options=('!strip')
    
      27
    
      28source_x86_64=("${_appname}-${arch[0]}-${pkgver}.zip::${_ghurl}/releases/download/${_gitversion}/${_appname}-bundle-${pkgver}-${_barch[0]}.zip")
    
      29source_aarch64=("${_appname}-${arch[1]}-${pkgver}.zip::${_ghurl}/releases/download/${_gitversion}/${_appname}-bundle-${pkgver}-${_barch[1]}.zip")
    
      30sha256sums_x86_64=('2a85a9055c216017663a1c996344c27b8e1fd84649e99c1233122745246daf5e')
    
      31sha256sums_aarch64=('831ff46587ec27940c72d17c4bdf6f56849e8cce81008c55d5f2cfadeac0bb28')
    
      32
    
      33
    
      34package() {
    
      35	cd "${srcdir}/" || exit
    
      36
    
      37	install -Dm755 "${_execname[@]}" -t "${pkgdir}/usr/bin/"
    
      38
    
      39	install -Dm644 "README.md" -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      40
    
      41	install -Dm644 "LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      42}
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-13 17:14:56	Low	2