fastmc

LOW
maintainer CallMeAlphabet 0 votes scanned 2026-08-23 09:20:24.806442
View on AUR
Why flagged

The package builds from source hosted on the maintainer's GitHub, which is normal for AUR packages; the SKIP'd checksum and recent upload with few votes raise mild trust concerns, but there is no evidence of malicious behavior or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub, which is normal for AUR packages; the SKIP'd checksum and recent upload with few votes raise mild trust concerns, but there is no evidence of malicious behavior or remote code execution.

PKGBUILD

1# Maintainer: CallMeAlphabet
2pkgname=fastmc
3pkgver=1
4pkgrel=1
5pkgdesc="fastmc, create a Minecraft server in under a minute, builds from source"
6arch=('x86_64')
7url="https://github.com/CallMeAlphabet/fastmc"
8license=('GPL-3.0-or-later')
9depends=('gcc-libs')
10makedepends=('cargo')
11provides=('fastmc')
12conflicts=('fastmc-bin')
13source=("fastmc-$pkgver.tar.gz::https://github.com/CallMeAlphabet/fastmc/archive/refs/tags/latest.tar.gz")
14sha256sums=('SKIP')
15
16prepare() {
17 rm -rf "$srcdir/build"
18 mkdir -p "$srcdir/build"
19 tar -xzf "$srcdir/fastmc-$pkgver.tar.gz" --strip-components=1 -C "$srcdir/build"
20 cd "$srcdir/build"
21 cargo fetch --locked --target x86_64-unknown-linux-gnu
22}
23
24build() {
25 cd "$srcdir/build"
26 export RUSTUP_TOOLCHAIN=stable
27 export CARGO_TARGET_DIR=target
28 unset LDFLAGS CFLAGS CXXFLAGS
29 cargo build --frozen --release
30}
31
32package() {
33 cd "$srcdir/build"
34 install -Dm755 "target/release/fastmc" "$pkgdir/usr/bin/fastmc"
35 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
36 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
37}
38

Scan history

Scanned at (UTC)SeverityRules
2026-08-23 09:20:24 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion