fastmc
The package builds from source hosted on the maintainer's GitHub, which is normal for AUR packages; the SKIP'd checksum and recent upload with few votes raise mild trust concerns, but there is no evidence of malicious behavior or remote code execution.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub, which is normal for AUR packages; the SKIP'd checksum and recent upload with few votes raise mild trust concerns, but there is no evidence of malicious behavior or remote code execution.
PKGBUILD
# Maintainer: CallMeAlphabet
pkgname=fastmc
pkgver=1
pkgrel=1
pkgdesc="fastmc, create a Minecraft server in under a minute, builds from source"
arch=('x86_64')
url="https://github.com/CallMeAlphabet/fastmc"
license=('GPL-3.0-or-later')
depends=('gcc-libs')
makedepends=('cargo')
provides=('fastmc')
conflicts=('fastmc-bin')
source=("fastmc-$pkgver.tar.gz::https://github.com/CallMeAlphabet/fastmc/archive/refs/tags/latest.tar.gz")
sha256sums=('SKIP')
prepare() {
rm -rf "$srcdir/build"
mkdir -p "$srcdir/build"
tar -xzf "$srcdir/fastmc-$pkgver.tar.gz" --strip-components=1 -C "$srcdir/build"
cd "$srcdir/build"
cargo fetch --locked --target x86_64-unknown-linux-gnu
}
build() {
cd "$srcdir/build"
export RUSTUP_TOOLCHAIN=stable
export CARGO_TARGET_DIR=target
unset LDFLAGS CFLAGS CXXFLAGS
cargo build --frozen --release
}
package() {
cd "$srcdir/build"
install -Dm755 "target/release/fastmc" "$pkgdir/usr/bin/fastmc"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-23 09:20:24 | Low | 2 |