dexo-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-09-25 01:45:24.583274

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases, which is a supply-chain risk if the host is compromised, but the sources are from the project's official repository with verifiable checksums, limiting impact to potential binary tampering.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a supply-chain risk if the host is compromised, but the sources are from the project's official repository with verifiable checksums, limiting impact to potential binary tampering.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=KingDasWinx
    
      4_gitname=Dexo
    
      5_appname=${_gitname,,}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="A terminal database workbench for PostgreSQL and MySQL"
    
      8
    
      9pkgver=1.4.0
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64' 'aarch64')
    
      14_barch=('x86_64-unknown-linux-gnu' 'aarch64-unknown-linux-gnu')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('MIT' 'Apache-2.0')
    
      21
    
      22provides=("${_appname}")
    
      23conflicts=("${pkgname%-bin}")
    
      24
    
      25depends=('glibc' 'libgcc')
    
      26
    
      27options=('!strip')
    
      28
    
      29source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[0]}.tar.gz")
    
      30source_aarch64=("${_appname}-${arch[1]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[1]}.tar.gz")
    
      31sha256sums_x86_64=('74e3241f384fc8b89db2e712c2e18ea6be43cb48c83ad717808085dd1179dc11')
    
      32sha256sums_aarch64=('8a1b058775cce26652241a47f06b5e07ceb7fee87c21e81c21154a31c2ed29f9')
    
      33
    
      34
    
      35case ${CARCH} in
    
      36  ${arch[0]})
    
      37    _CARCH=${_barch[0]}
    
      38    ;;
    
      39
    
      40  ${arch[1]})
    
      41    _CARCH=${_barch[1]}
    
      42    ;;
    
      43esac
    
      44
    
      45package() {
    
      46	cd "${srcdir}/${_appname}-${_CARCH}/" || exit
    
      47
    
      48	install -Dm755 ${_appname} -t "${pkgdir}/usr/bin/"
    
      49
    
      50	install -Dm644 README.md -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      51
    
      52	install -Dm644 LICENSE* -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 01:45:24	Low	2