ely-tree-bin

LOW

maintainer xihale 0 votes scanned 2026-10-19 09:25:06.082550

View on AUR

Why flagged

The package repackages a prebuilt upstream binary from a project-owned release host; while the host is not whitelisted, it hosts official releases, and the package installs only verified files without executing remote code or introducing malicious payloads.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package repackages a prebuilt upstream binary from a project-owned release host; while the host is not whitelisted, it hosts official releases, and the package installs only verified files without executing remote code or introducing malicious payloads.

PKGBUILD

      1# Maintainer: xihale <i@xihale.top>
    
      2# Upstream publishes ready Arch packages (nfpm): /opt/ely-office/ely-tree plus
    
      3# /usr/bin symlink, desktop entry and icon. Repack them verbatim.
    
      4pkgname=ely-tree-bin
    
      5pkgver=0.1.8
    
      6pkgrel=1
    
      7pkgdesc='ElyTree, part of Ely Office - Git client (prebuilt upstream package)'
    
      8arch=('x86_64')
    
      9url='https://git.zacharyzhang.com/ZacharyZhang-NY/ElyOffice'
    
      10license=('AGPL-3.0-or-later')
    
      11depends=('curl' 'expat' 'glibc' 'libgcc' 'libxcb' 'openssl' 'vulkan-icd-loader' 'wayland' 'zlib')
    
      12provides=('ely-tree')
    
      13conflicts=('ely-tree')
    
      14options=('!strip' '!debug')
    
      15source=("LICENSE::$url/raw/tag/v$pkgver/LICENSE")
    
      16sha256sums=('57c8ff33c9c0cfc3ef00e650a1cc910d7ee479a8bc509f6c9209a7c2a11399d6')
    
      17source_x86_64=("ely-tree-$pkgver-1-x86_64.pkg.tar.zst::$url/releases/download/v$pkgver/ely-tree-$pkgver-1-x86_64.pkg.tar.zst")
    
      18sha256sums_x86_64=('ee08ae11e193f3e4e4ad4d2391b18e5642ec42ceded11ccb54c058a75d38b461')
    
      19
    
      20package() {
    
      21	cp -a "$srcdir/opt" "$srcdir/usr" "$pkgdir/"
    
      22	install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 09:25:06	Low	2