ely-doc-bin

LOW

maintainer xihale 0 votes scanned 2026-10-19 09:25:06.082550

View on AUR

Why flagged

The package repackages a prebuilt upstream Arch package from a project-owned Git server; while the host is not whitelisted, it is plausibly official, and the content is data and binaries installed verbatim without execution of remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package repackages a prebuilt upstream Arch package from a project-owned Git server; while the host is not whitelisted, it is plausibly official, and the content is data and binaries installed verbatim without execution of remote code.

PKGBUILD

      1# Maintainer: xihale <i@xihale.top>
    
      2# Upstream publishes ready Arch packages (nfpm): /opt/ely-office/ely-doc plus
    
      3# /usr/bin symlink, desktop entry and icon. Repack them verbatim.
    
      4pkgname=ely-doc-bin
    
      5pkgver=0.1.8
    
      6pkgrel=1
    
      7pkgdesc='ElyDoc, part of Ely Office - offline-first word processor (prebuilt upstream package)'
    
      8arch=('x86_64')
    
      9url='https://git.zacharyzhang.com/ZacharyZhang-NY/ElyOffice'
    
      10license=('AGPL-3.0-or-later')
    
      11depends=('glibc' 'krb5' 'libgcc' 'libstdc++' 'libxcb' 'vulkan-icd-loader' 'wayland')
    
      12provides=('ely-doc')
    
      13conflicts=('ely-doc')
    
      14options=('!strip' '!debug')
    
      15source=("LICENSE::$url/raw/tag/v$pkgver/LICENSE")
    
      16sha256sums=('57c8ff33c9c0cfc3ef00e650a1cc910d7ee479a8bc509f6c9209a7c2a11399d6')
    
      17source_x86_64=("ely-doc-$pkgver-1-x86_64.pkg.tar.zst::$url/releases/download/v$pkgver/ely-doc-$pkgver-1-x86_64.pkg.tar.zst")
    
      18sha256sums_x86_64=('aa084e661b210ca7fd99c86beacc4399e8af82040027b0303cfb3f29351c0a55')
    
      19
    
      20package() {
    
      21	cp -a "$srcdir/opt" "$srcdir/usr" "$pkgdir/"
    
      22	install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 09:25:06	Low	2