exif420

MEDIUM

maintainer Jacob_Meyers 0 votes scanned 2026-08-22 05:16:50.653524

View on AUR

Why flagged

The package installs a prebuilt shared library binary from a GitHub release without a source build, making it unverifiable; a compromised host or malicious upload could lead to code execution in dependent programs.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt shared library binary from a GitHub release without a source build, making it unverifiable; a compromised host or malicious upload could lead to code execution in dependent programs.

PKGBUILD

      1# Maintainer: Jacob Meyers <jeyersdev@gmail.com>
    
      2pkgname=exif420
    
      3pkgver=2.0
    
      4pkgrel=1
    
      5pkgdesc="The Simple, lightweight, & fast EXIF Reader Library for C++"
    
      6arch=('x86_64')
    
      7url="https://github.com/Jeyers-Development/exif420"
    
      8license=('MIT')
    
      9depends=('glibc')
    
      10source=("$url/releases/download/v$pkgver/libexif420.so")
    
      11options=('!debug' '!strip')
    
      12sha256sums=('e0db0b2170d1116bf2db9e82cf2ab59e3ad02a311a04ecc56960ed9fd028b48c')
    
      13
    
      14package() {
    
      15    install -Dm755 "$srcdir/libexif420.so" "$pkgdir/usr/lib/libexif420.so"
    
      16}
    
      17

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 05:16:50	Medium	2