dispatch-workflows-bin

LOW

maintainer modinfo 0 votes scanned 2026-11-03 16:05:05.794714

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; the low severity is due to the binary nature of the source and unverifiable origin, but it comes from a trusted project host with no signs of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; the low severity is due to the binary nature of the source and unverifiable origin, but it comes from a trusted project host with no signs of malicious behavior.

PKGBUILD

      1pkgname=dispatch-workflows-bin
    
      2pkgver=1.0.1
    
      3pkgrel=1
    
      4pkgdesc='Desktop runner for sequential GitHub Actions workflows'
    
      5arch=('x86_64')
    
      6url='https://github.com/skorotkiewicz/dispatch-workflows'
    
      7license=('MIT')
    
      8depends=('ca-certificates' 'gcc-libs' 'glibc' 'gtk3' 'libayatana-appindicator' 'webkit2gtk-4.1')
    
      9optdepends=('github-cli: authenticate using gh auth login instead of a token')
    
      10provides=("dispatch-workflows=${pkgver}")
    
      11conflicts=('dispatch-workflows')
    
      12options=('!strip' '!debug')
    
      13
    
      14_tag=v1.0.1
    
      15source=('LICENSE' 'dispatch-workflows.desktop')
    
      16source_x86_64=("${pkgname}-${pkgver}.tar.zst::${url}/releases/download/${_tag}/stable-linux-x64-Dispatch.tar.zst")
    
      17sha256sums=('a9e9f7748e5191da4c9ecddcf2f2807b7c0339b08438773cf67c8359419d3945'
    
      18            'ad2fee919d27116fee70435a9da9f107fea549ba6c46b173f241d8a1369ba4b3')
    
      19sha256sums_x86_64=('b8840ec1bd384286e15b51ed0d70139e45f8bd4763ef7bf01e698b678a48307c')
    
      20
    
      21package() {
    
      22  install -dm755 "${pkgdir}/opt/dispatch-workflows" "${pkgdir}/usr/bin"
    
      23  cp -a "${srcdir}/Dispatch/." "${pkgdir}/opt/dispatch-workflows/"
    
      24  ln -s /opt/dispatch-workflows/bin/launcher "${pkgdir}/usr/bin/dispatch-workflows"
    
      25  install -Dm644 "${srcdir}/dispatch-workflows.desktop" \
    
      26    "${pkgdir}/usr/share/applications/dispatch-workflows.desktop"
    
      27  install -Dm644 "${srcdir}/Dispatch/Resources/app/public/favicon.svg" \
    
      28    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/dispatch-workflows.svg"
    
      29  install -Dm644 "${srcdir}/LICENSE" \
    
      30    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 16:05:05	Low	2