ditto-bin

maintainer Dominiquini · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads a prebuilt binary from a GitHub release, which is a normal practice for AUR packages; the source is from the project's official repository, and the binary is installed directly, posing no evident risk of code execution beyond the intended application.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a normal practice for AUR packages; the source is from the project's official repository, and the binary is installed directly, posing no evident risk of code execution beyond the intended application.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=arvingarciabtw
    
      4_gitname=ditto
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="A system-wide ASCII keyboard visualizer in the terminal"
    
      8
    
      9pkgver=1.3.3
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64')
    
      14_barch=('linux_amd64')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('MIT')
    
      21
    
      22depends=('glibc')
    
      23
    
      24provides=("${_appname}")
    
      25conflicts=("${pkgname%%-bin}")
    
      26
    
      27options=(!strip)
    
      28
    
      29source=("README-${pkgver}.md::${_ghurlraw}/README.md"
    
      30		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
    
      31source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}_${_barch[0]}.tar.gz")
    
      32sha256sums=('2adb3649aff6005ca0e7982f4672fb16c71984f9f4158772d25c92b44efbaeb2'
    
      33            '9a383b4bb76f67a545bae3818eb5de5415a83bded18d3dbd43483066f7dd429d')
    
      34sha256sums_x86_64=('90124cb8518380332af674fd32d446b0abec5fc38b7d0fa84e06bcbe700d1131')
    
      35
    
      36
    
      37case ${CARCH} in
    
      38  ${arch[0]})
    
      39    _CARCH=${_barch[0]}
    
      40    ;;
    
      41esac
    
      42
    
      43package() {
    
      44	cd "${srcdir}/" || exit
    
      45
    
      46	install -Dm755 "${_appname}_${_CARCH}" "${pkgdir}/usr/bin/${_appname}"
    
      47
    
      48	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      49
    
      50	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 13:21:13	LOW	2