fastmc-bin
The package installs a prebuilt binary from the project's own GitHub releases, which is a common AUR practice; while the skipped checksums reduce verifiability, the source is plausibly legitimate and no malicious behavior is evident.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is a common AUR practice; while the skipped checksums reduce verifiability, the source is plausibly legitimate and no malicious behavior is evident.
PKGBUILD
# Maintainer: CallMeAlphabet
pkgname=fastmc-bin
pkgver=359c3cf
pkgrel=1
pkgdesc="fastmc, create a Minecraft server in under a minute, prebuilt binary"
arch=('x86_64')
url="https://github.com/CallMeAlphabet/fastmc"
license=('GPL-3.0-or-later')
depends=('gcc-libs')
makedepends=('git')
provides=('fastmc')
conflicts=('fastmc')
source=("fastmc::https://github.com/CallMeAlphabet/fastmc/releases/download/latest/fastmc"
"fastmc.sha256::https://github.com/CallMeAlphabet/fastmc/releases/download/latest/fastmc.sha256")
sha256sums=('SKIP' 'SKIP')
pkgver() {
git ls-remote "https://github.com/CallMeAlphabet/fastmc.git" refs/tags/latest | cut -c1-7
}
check() {
cd "$srcdir"
sha256sum -c "fastmc.sha256"
}
package() {
cd "$srcdir"
install -Dm755 "fastmc" "$pkgdir/usr/bin/fastmc"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-21 11:15:01 | Low | 2 |