dux-lang-bin

LOW
maintainer Dominiquini 1 votes scanned 2026-09-02 07:50:36.081104
View on AUR
Why flagged

The package downloads a prebuilt binary from GitHub releases, which is a common but suboptimal practice; however, the source is from the project's official repository with verifiable checksums, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from GitHub releases, which is a common but suboptimal practice; however, the source is from the project's official repository with verifiable checksums, reducing risk.

PKGBUILD

1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
2
3_gitauthor=vorjdux
4_gitname=dux-lang
5_appname=${_gitname%-lang}
6pkgname=${_gitname}-bin
7pkgdesc="An experimental new programming language"
8
9pkgver=0.1.3
10pkgrel=1
11_gitversion=v${pkgver}
12
13arch=('x86_64')
14_barch=('linux-x86_64')
15
16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
18url=${_ghurl}
19
20license=('MIT')
21
22provides=("${_appname}")
23conflicts=("${pkgname%-bin}")
24
25makedepends=('git')
26depends=('glibc' 'libgcc' 'libstdc++' 'readline' 'zlib' 'zstd')
27
28options=('!strip')
29
30source=("README-${pkgver}.md::${_ghurlraw}/README.md"
31 "LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
32source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${pkgver}-${_barch[0]}.tar.gz")
33sha256sums=('d55f37eb4bb3b4dfeaf01896254488a7d6659f37c3636ffdab0a5e0d498083ad'
34 '30c60d5d9ea8435588b76dfa956cf8ad5ebb2e7c9b7d0f755a3e8effc46c5fac')
35sha256sums_x86_64=('c4731dab76e34de70013ea044a3515d7cabf7760ae19f6d0db60dd32a426bb5e')
36
37
38case ${CARCH} in
39 ${arch[0]})
40 _CARCH=${_barch[0]}
41 ;;
42esac
43
44_PACKAGE_DIR="${_appname}-${pkgver}-${_CARCH}/"
45
46prepare() {
47 cd "${srcdir}/" || exit
48
49 rm -rf git && git clone -n --depth=1 --filter=tree:0 "${_ghurl}" git
50
51 cd git && git sparse-checkout set --no-cone /examples && git checkout
52
53 cp -rfa examples "${srcdir}/${_PACKAGE_DIR}/share/${_appname}/" && cd .. && rm -rf git
54}
55
56package() {
57 cd "${srcdir}/${_PACKAGE_DIR}/" || exit
58
59 install -dm755 "${pkgdir}/usr"
60
61 cp -rfa bin lib include share "${pkgdir}/usr/"
62
63 install -Dm644 "../README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
64
65 install -Dm644 "../LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
66}
67

Scan history

Scanned at (UTC)SeverityRules
2026-09-02 07:50:36 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion