elmerfem-base-bin
The package is a precompiled binary from a GitHub release by a maintainer with few votes and recent upload, but it installs only data and libraries from a plausible project source without executing remote code or exfiltrating data.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package is a precompiled binary from a GitHub release by a maintainer with few votes and recent upload, but it installs only data and libraries from a plausible project source without executing remote code or exfiltrating data.
PKGBUILD
# Maintainer: piratecarrot
pkgname=elmerfem-base-bin
pkgver=26.2.1
_pkgrel_src=1
pkgrel=1
pkgdesc="A finite element software for multiphysical problems (without GUI and Ice, precompiled)"
arch=('x86_64')
url="https://www.elmerfem.org"
license=('GPL-2.0-only AND LGPL-2.1-only AND LicenseRef-Elmer')
provides=('elmerfem-base')
conflicts=('elmerfem-base' 'elmerfem-git' 'elemerfem')
depends=(
'arpack'
'blas-openblas'
'hypre'
'openmp'
'openmpi'
)
source=("https://github.com/tubbywrestler/elmerfem-base-bin/releases/download/${pkgver}-${_pkgrel_src}/elmerfem-base-${pkgver}-${_pkgrel_src}-x86_64.pkg.tar.zst")
sha256sums=('34301b1db539ed5f1fbca857cb40f297c06583c5d68d271a5fa2ee7dfb3ca518')
package() {
bsdtar -xf "${srcdir}/elmerfem-base-${pkgver}-${_pkgrel_src}-x86_64.pkg.tar.zst" -C "${pkgdir}" --exclude .PKGINFO --exclude .BUILDINFO --exclude .MTREE
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-02 15:51:02 | Low | 2 |