dux-lang-bin
LOW
maintainer Dominiquini
1 votes
scanned 2026-09-02 07:50:36.081104
Why flagged
The package downloads a prebuilt binary from GitHub releases, which is a common but suboptimal practice; however, the source is from the project's official repository with verifiable checksums, reducing risk.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from GitHub releases, which is a common but suboptimal practice; however, the source is from the project's official repository with verifiable checksums, reducing risk.
PKGBUILD
1
# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
2
3
_gitauthor=vorjdux
4
_gitname=dux-lang
5
_appname=${_gitname%-lang}
6
pkgname=${_gitname}-bin
7
pkgdesc="An experimental new programming language"
8
9
pkgver=0.1.3
10
pkgrel=1
11
_gitversion=v${pkgver}
12
13
arch=('x86_64')
14
_barch=('linux-x86_64')
15
16
_ghurl="https://github.com/${_gitauthor}/${_gitname}"
17
_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
18
url=${_ghurl}
19
20
license=('MIT')
21
22
provides=("${_appname}")
23
conflicts=("${pkgname%-bin}")
24
25
makedepends=('git')
26
depends=('glibc' 'libgcc' 'libstdc++' 'readline' 'zlib' 'zstd')
27
28
options=('!strip')
29
30
source=("README-${pkgver}.md::${_ghurlraw}/README.md"
31
"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
32
source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${pkgver}-${_barch[0]}.tar.gz")
33
sha256sums=('d55f37eb4bb3b4dfeaf01896254488a7d6659f37c3636ffdab0a5e0d498083ad'
34
'30c60d5d9ea8435588b76dfa956cf8ad5ebb2e7c9b7d0f755a3e8effc46c5fac')
35
sha256sums_x86_64=('c4731dab76e34de70013ea044a3515d7cabf7760ae19f6d0db60dd32a426bb5e')
36
37
38
case ${CARCH} in
39
${arch[0]})
40
_CARCH=${_barch[0]}
41
;;
42
esac
43
44
_PACKAGE_DIR="${_appname}-${pkgver}-${_CARCH}/"
45
46
prepare() {
47
cd "${srcdir}/" || exit
48
49
rm -rf git && git clone -n --depth=1 --filter=tree:0 "${_ghurl}" git
50
51
cd git && git sparse-checkout set --no-cone /examples && git checkout
52
53
cp -rfa examples "${srcdir}/${_PACKAGE_DIR}/share/${_appname}/" && cd .. && rm -rf git
54
}
55
56
package() {
57
cd "${srcdir}/${_PACKAGE_DIR}/" || exit
58
59
install -dm755 "${pkgdir}/usr"
60
61
cp -rfa bin lib include share "${pkgdir}/usr/"
62
63
install -Dm644 "../README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
64
65
install -Dm644 "../LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
66
}
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-02 07:50:36 | Low | 2 |