daftar-bin
The package downloads prebuilt binaries from a GitHub release belonging to the maintainer; while the host is not whitelisted, it is a plausible project-owned source, and the binaries are for a native app with no indication of remote code execution or malicious behavior.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from a GitHub release belonging to the maintainer; while the host is not whitelisted, it is a plausible project-owned source, and the binaries are for a native app with no indication of remote code execution or malicious behavior.
PKGBUILD
# Maintainer: Parham Alvani <parham.alvani@gmail.com>
pkgname=daftar-bin
pkgver=0.2.0
pkgrel=1
pkgdesc="A native GTK app and a command line for an Obsidian vault in a Git repository"
arch=(x86_64)
url="https://github.com/parham-alvani/notes-linux"
license=('GPL-3.0-only')
depends=(gtk4 libadwaita webkitgtk-6.0 gtksourceview5 vte4 pango cairo glib2 graphene libsoup3 gcc-libs glibc)
optdepends=('git: syncing the vault'
'neovim: the Neovim editing mode')
provides=('daftar' 'daftar-cli')
conflicts=('daftar' 'daftar-cli' 'daftar-cli-bin')
source=("https://github.com/parham-alvani/notes-linux/releases/download/v${pkgver}/daftar-${pkgver}-x86_64.tar.gz"
"LICENSE-${pkgver}::https://raw.githubusercontent.com/parham-alvani/notes-linux/v${pkgver}/LICENSE")
sha256sums=('31ab18ad26d0592bece5a55798988c42395808be9bf5d94f9c8ffa3690dd3ca4'
'3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986')
package() {
install -Dm755 daftar "$pkgdir/usr/bin/daftar"
install -Dm755 daftar-cli "$pkgdir/usr/bin/daftar-cli"
install -Dm644 me.parham1995.notes.desktop "$pkgdir/usr/share/applications/me.parham1995.notes.desktop"
install -Dm644 me.parham1995.notes.png "$pkgdir/usr/share/icons/hicolor/256x256/apps/me.parham1995.notes.png"
install -Dm644 "LICENSE-${pkgver}" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-26 15:45:54 | Low | 2 |