dtask-bin
The package downloads a prebuilt binary and documentation from GitHub releases; the binary comes from a project-owned repository, and the checksums are provided, making supply-chain risk low despite the unverified host not being on a whitelist.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary and documentation from GitHub releases; the binary comes from a project-owned repository, and the checksums are provided, making supply-chain risk low despite the unverified host not being on a whitelist.
PKGBUILD
# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
_gitauthor=GuestAUser
_gitname=dtask
_appname=${_gitname}
pkgname=${_appname}-bin
pkgdesc="A fast, mouse-first terminal task manager"
pkgver=1.0.0
pkgrel=1
_gitversion=v${pkgver}
arch=('x86_64')
_barch=('linux-x86_64')
_ghurl="https://github.com/${_gitauthor}/${_gitname}"
_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
url=${_ghurl}
license=('MIT')
provides=("${_appname}")
conflicts=("${pkgname%-bin}")
depends=('glibc' 'libgcc')
options=('!strip')
source=("README-${pkgver}.md::${_ghurlraw}/README.md")
source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_gitversion}-${_barch[0]}.tar.gz")
sha256sums=('cacfdf9578a2b11c8aa89c6d2ae63d79817fb86ffd088429bf54cd88878dac3c')
sha256sums_x86_64=('6bba68c5b60d99282c1714d1daad56f94ff20d940a1537fb689f65ecb4e58a3c')
case ${CARCH} in
${arch[0]})
_CARCH=${_barch[0]}
;;
esac
package() {
cd "${srcdir}/${_gitname}-${_gitversion}-${_CARCH}/" || exit
install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
install -dm755 "${pkgdir}/usr/share/${_appname}"
cp -rfa "themes" "${pkgdir}/usr/share/${_appname}/"
install -Dm644 "${srcdir}/README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 04:12:59 | Low | 2 |