fake-home-git (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a public Git repository, uses standard build/install steps, and installs executable scripts from the source; the low-vote and recent-upload flags are metadata concerns, not security risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Grafcube <grafcube at disroot dot org>
    
      2
    
      3_pkgname=fake-home
    
      4pkgname=${_pkgname}-git
    
      5pkgver=v0.1.0.3.r2.gd1afa2b
    
      6pkgrel=1
    
      7pkgdesc="Banish your programs that don't respect XDG base directory"
    
      8arch=(any)
    
      9url="https://github.com/superluserdo/${_pkgname}"
    
      10license=('GPL-3.0-or-later')
    
      11depends=()
    
      12makedepends=()
    
      13provides=($_pkgname)
    
      14conflicts=($_pkgname)
    
      15source=("${pkgname}::git+${url}.git")
    
      16sha256sums=('SKIP')
    
      17
    
      18pkgver() {
    
      19	cd "$pkgname"
    
      20	git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
    
      21}
    
      22
    
      23package() {
    
      24	cd "${pkgname}"
    
      25	install -t "${pkgdir}/usr/bin/" -Dm755 fakehome fakehome-banish fakehome-changesymlinks
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-30 00:29:30	Clean	2
2026-10-29 21:53:30	Low	1