dope

maintainer michealh · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a public GitHub source repository, which is normal for AUR packages; the low severity is due to skipped checksum and few votes, but the source is verifiable and the build process is transparent.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public GitHub source repository, which is normal for AUR packages; the low severity is due to skipped checksum and few votes, but the source is verifiable and the build process is transparent.

PKGBUILD

      1# Maintainer: Micheal <micheal12111@proton.me>
    
      2pkgname=dope
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="The RAM tool with personality - sassy quotes and beautiful stats for Arch"
    
      6arch=('x86_64')
    
      7url="https://github.com/duhcli/dope"
    
      8license=('MIT')
    
      9depends=('glibc')
    
      10makedepends=('cargo' 'rust')
    
      11
    
      12source=("dope-$pkgver.tar.gz::https://github.com/duhcli/dope/archive/v$pkgver.tar.gz")
    
      13sha256sums=('SKIP')
    
      14
    
      15build() {
    
      16    cd "$srcdir/dope-$pkgver"
    
      17    cargo build --release --target-dir=target
    
      18}
    
      19
    
      20package() {
    
      21    cd "$srcdir/dope-$pkgver"
    
      22    install -Dm755 target/release/dope "$pkgdir/usr/bin/dope"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 21:35:42	LOW	2