desksaw
The package downloads a zip file from the project's GitHub release page, extracts it, and installs the binary and assets; the unverified checksums (SKIP) are a quality issue but the source is from the official project repository, and no remote code execution or obfuscation is present.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a zip file from the project's GitHub release page, extracts it, and installs the binary and assets; the unverified checksums (SKIP) are a quality issue but the source is from the official project repository, and no remote code execution or obfuscation is present.
PKGBUILD
# Maintainer: Macro-Proto
pkgname='desksaw'
pkgver=0.3.0
pkgrel=4
_filename='deskSaw030LINUX'
epoch=
pkgdesc="An interactive Desktop Pet from Casualties:Unknown"
arch=('x86_64')
url="https://github.com/dee-dee-catorce/desksaw"
license=(MIT)
groups=()
depends=()
makedepends=()
checkdepends=()
optdepends=()
provides=()
conflicts=()
replaces=()
backup=()
options=()
install=
changelog=
source=("https://github.com/dee-dee-catorce/$pkgname/releases/download/v$pkgver/deskSaw030LINUX.zip" "$pkgname.desktop" "newlogo.png")
noextract=()
sha256sums=('4a46273ddbe4900b96f7f3d9cddeae65fb6685f09640d9d886dd6d53a922c4d2' 'SKIP' 'SKIP')
validpgpkeys=()
package() {
mkdir -p "$pkgdir/usr/share/$pkgname"
cp -r ./$_filename/* "$pkgdir/usr/share/$pkgname"
chmod +x "$pkgdir/usr/share/$pkgname/$_filename.$CARCH"
install -Dm644 "newlogo.png" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$pkgname.png"
install -Dm644 "$pkgname.desktop" "$pkgdir/usr/share/applications/$pkgname.desktop"
mkdir -p "$pkgdir/usr/bin/" && ln -s "/usr/share/$pkgname/$_filename.$CARCH" "$pkgdir/usr/bin/$pkgname"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-28 09:20:32 | Low | 2 |