educamadrid-nextcloud-bin

MEDIUM

maintainer Stokes 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release without a clear build process, which presents a supply-chain risk if the release asset is swapped, though the source is from a plausible project-owned host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from a GitHub release without a clear build process, which presents a supply-chain risk if the release asset is swapped, though the source is from a plausible project-owned host.

PKGBUILD

      1# Maintainer: Stokes <jesusmanuelgonzalezmeneses18@gmail.com>
    
      2
    
      3pkgname=educamadrid-nextcloud-bin
    
      4_pkgname=educamadrid-nextcloud
    
      5pkgver=0.3.0
    
      6pkgrel=1
    
      7pkgdesc="Unofficial GUI to add the EducaMadrid Nextcloud account to the Nextcloud desktop client on KDE Plasma (prebuilt binary)"
    
      8arch=('x86_64')
    
      9url="https://github.com/13Stokes31/educamadrid-nextcloud"
    
      10license=('MIT')
    
      11options=('!strip' '!debug')
    
      12depends=('dbus' 'nextcloud-client' 'kwallet' 'xdg-utils' 'gcc-libs' 'glibc' 'libglvnd' 'libx11' 'libxcursor' 'libxi'
    
      13         'libxkbcommon' 'libxkbcommon-x11' 'libxrender' 'wayland')
    
      14provides=("$_pkgname=$pkgver")
    
      15conflicts=("$_pkgname")
    
      16source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/$_pkgname-v$pkgver-x86_64-linux-gnu.tar.gz")
    
      17sha256sums=('0d97266818ef6962c39bdd3603ca1cc3fa364cd3c61835b7823beeddd2964009')
    
      18
    
      19package() {
    
      20    cd "$_pkgname-$pkgver-x86_64-linux-gnu"
    
      21    install -Dm755 "$_pkgname" -t "$pkgdir/usr/bin/"
    
      22    install -Dm644 "$_pkgname.desktop" -t "$pkgdir/usr/share/applications/"
    
      23    install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Medium	2
2026-10-05 23:40:58	Low	1