dagit-bin

LOW

maintainer lxsh-S 0 votes scanned 2026-08-23 09:20:24.806442

View on AUR

Why flagged

The package downloads a prebuilt binary from a personal GitHub release; while the host is not a major vendor, it is plausibly the project's own source, and the binary is a simple terminal visualizer with no indication of malicious behavior, so the risk is low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a personal GitHub release; while the host is not a major vendor, it is plausibly the project's own source, and the binary is a simple terminal visualizer with no indication of malicious behavior, so the risk is low.

PKGBUILD

      1# Maintainer: lxsh-S <kumarlakshya973@gmail.com>
    
      2pkgname='dagit-bin'
    
      3pkgver=0.0.1
    
      4pkgrel=1
    
      5pkgdesc="Visualize your git repo in your terminal!"
    
      6arch=('x86_64')
    
      7url="https://github.com/lxsh-S/dagit"
    
      8license=('MIT')
    
      9depends=()
    
      10makedepends=()
    
      11provides=('dagit')
    
      12conflicts=('dagit')
    
      13
    
      14source=("https://github.com/lxsh-S/dagit/releases/download/v${pkgver}/dagit-linux-amd64.tar.gz")
    
      15sha256sums=('SKIP')
    
      16
    
      17package() {
    
      18  install -Dm755 "$srcdir/dagit-linux-amd64" "$pkgdir/usr/bin/dagit"
    
      19}
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 09:20:24	Low	2
2026-08-23 07:20:18	Low	2