fastcount-bin

LOW

maintainer CallMeAlphabet 0 votes scanned 2026-08-23 21:21:38.325556

View on AUR

Why flagged

The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice; while checksums are skipped, the source is from a legitimate project repository, and the worst case is limited to supply-chain risk of a compromised release.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice; while checksums are skipped, the source is from a legitimate project repository, and the worst case is limited to supply-chain risk of a compromised release.

PKGBUILD

      1# Maintainer: CallMeAlphabet
    
      2pkgname=fastcount-bin
    
      3pkgver=0
    
      4pkgrel=1
    
      5pkgdesc="fastcount, an incredibly fast, incredibly useless counter, prebuilt binary"
    
      6arch=('x86_64')
    
      7url="https://github.com/CallMeAlphabet/fastcount"
    
      8license=('Apache-2.0')
    
      9depends=('gcc-libs')
    
      10makedepends=('git' 'curl')
    
      11provides=('fastcount')
    
      12conflicts=('fastcount')
    
      13source=("fastcount::https://github.com/CallMeAlphabet/fastcount/releases/download/latest/fastcount"
    
      14        "fastcount.sha256::https://github.com/CallMeAlphabet/fastcount/releases/download/latest/fastcount.sha256")
    
      15sha256sums=('SKIP' 'SKIP')
    
      16
    
      17pkgver() {
    
      18    date -u -d "$(curl -s "https://api.github.com/repos/CallMeAlphabet/fastcount/commits/latest" | grep -m1 '"date"' | cut -d'"' -f4)" +%Y%m%d%H%M%S
    
      19}
    
      20
    
      21check() {
    
      22    cd "$srcdir"
    
      23    sha256sum -c "fastcount.sha256"
    
      24}
    
      25
    
      26package() {
    
      27    cd "$srcdir"
    
      28    install -Dm755 "fastcount" "$pkgdir/usr/bin/fastcount"
    
      29}
    
      30

Changes since previous scan

--- PKGBUILD @ 2026-08-20 13:11
+++ PKGBUILD @ 2026-08-23 21:21
@@ -2,10 +2,10 @@
 pkgname=fastcount-bin
 pkgver=0
 pkgrel=1
-pkgdesc="An incredibly fast, incredibly useless counter (x86_64 Linux only) — prebuilt binary from latest tested CI build"
+pkgdesc="fastcount, an incredibly fast, incredibly useless counter, prebuilt binary"
 arch=('x86_64')
 url="https://github.com/CallMeAlphabet/fastcount"
-license=('GPL-3.0-or-later')
+license=('Apache-2.0')
 depends=('gcc-libs')
 makedepends=('git' 'curl')
 provides=('fastcount')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 21:21:38	Low	2
2026-08-20 13:11:31	Clean	0
2026-08-01 00:11:18	Clean	0
2026-07-31 00:14:10	Low	2
2026-07-30 00:17:23	Low	2
2026-07-29 00:25:53	Low	2
2026-07-28 00:07:28	Low	2
2026-07-27 00:24:32	Low	2
2026-07-26 00:07:32	Low	2
2026-07-25 00:13:44	Low	2
2026-07-24 00:02:28	Low	2
2026-07-23 00:14:47	Low	2
2026-07-22 00:29:32	Low	2
2026-07-21 00:24:15	Low	2
2026-07-20 00:19:49	Low	2
2026-07-19 00:17:08	Low	2
2026-07-18 13:57:59	Low	2
2026-07-18 07:57:03	Medium	2
2026-07-18 00:14:48	Medium	2
2026-07-17 19:55:55	Medium	2