fcitx5-misstype-bin

LOW
maintainer pastleo 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to limited votes and recent upload, not malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages; the low severity is due to limited votes and recent upload, not malicious behavior.

PKGBUILD

1# Maintainer: PastLeo <chgu82837@gmail.com>
2# Release-pinned binary recipe; generated updates follow published assets.
3pkgname=fcitx5-misstype-bin
4pkgver=0.5.4
5pkgrel=1
6pkgdesc='Offline, fuzzy Zhuyin input method for fcitx5 (prebuilt)'
7arch=('x86_64' 'aarch64')
8url='https://github.com/Yukaii/misstype'
9license=('MIT' 'BSD-3-Clause' 'CC-BY-4.0' 'CC-BY-SA-4.0' 'Unicode-3.0')
10depends=('fcitx5' 'gcc-libs' 'glibc')
11optdepends=('fcitx5-configtool: add Misstype to your input methods'
12 'gtk4: misstype-dictionary-editor'
13 'fcitx5-gtk: GTK application integration'
14 'fcitx5-qt: Qt application integration')
15provides=("fcitx5-misstype=$pkgver")
16conflicts=('fcitx5-misstype' 'fcitx5-misstype-git' 'fcitx5-mistype-git'
17 'ibus-misstype' 'ibus-misstype-git' 'ibus-misstype-bin')
18options=('!strip' '!debug')
19source_x86_64=("$url/releases/download/v$pkgver/Misstype-$pkgver-arch-x86_64.pkg.tar.zst")
20sha256sums_x86_64=('d67b8299bca98af381a8caaeb18218827510b647169b323b3e03c370d56692fb')
21source_aarch64=("$url/releases/download/v$pkgver/Misstype-$pkgver-arch-aarch64.pkg.tar.zst")
22# Placeholder: prepare_aur_bin.py pins it, or drops aarch64 for releases without that asset.
23sha256sums_aarch64=('f296f522df3277f0aaba957bed9b8f5b568feec27b4517ded8eb057936fe3919')
24noextract=("Misstype-$pkgver-arch-x86_64.pkg.tar.zst"
25 "Misstype-$pkgver-arch-aarch64.pkg.tar.zst")
26
27package() {
28 # Only the payload, never the original pacman package metadata.
29 bsdtar -xf "$srcdir/Misstype-$pkgver-arch-$CARCH.pkg.tar.zst" -C "$pkgdir" usr
30 mv "$pkgdir/usr/share/licenses/fcitx5-misstype-git" "$pkgdir/usr/share/licenses/$pkgname"
31}
32

Changes since previous scan

--- PKGBUILD @ 2026-10-14 11:19
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
# Maintainer: PastLeo <chgu82837@gmail.com>
# Release-pinned binary recipe; generated updates follow published assets.
pkgname=fcitx5-misstype-bin
-pkgver=0.5.3
+pkgver=0.5.4
pkgrel=1
pkgdesc='Offline, fuzzy Zhuyin input method for fcitx5 (prebuilt)'
arch=('x86_64' 'aarch64')
@@ -17,10 +17,10 @@
'ibus-misstype' 'ibus-misstype-git' 'ibus-misstype-bin')
options=('!strip' '!debug')
source_x86_64=("$url/releases/download/v$pkgver/Misstype-$pkgver-arch-x86_64.pkg.tar.zst")
-sha256sums_x86_64=('47bb8a582d55eca10878c51b898a9aa63972123f8d459459d4ee72c12f4a0cd5')
+sha256sums_x86_64=('d67b8299bca98af381a8caaeb18218827510b647169b323b3e03c370d56692fb')
source_aarch64=("$url/releases/download/v$pkgver/Misstype-$pkgver-arch-aarch64.pkg.tar.zst")
# Placeholder: prepare_aur_bin.py pins it, or drops aarch64 for releases without that asset.
-sha256sums_aarch64=('26500a97821a49f531be82e94819843cc19f0e032d6db7e38b19750fcffb7021')
+sha256sums_aarch64=('f296f522df3277f0aaba957bed9b8f5b568feec27b4517ded8eb057936fe3919')
noextract=("Misstype-$pkgver-arch-x86_64.pkg.tar.zst"
"Misstype-$pkgver-arch-aarch64.pkg.tar.zst")

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 17:20:19 Low 2
2026-10-14 11:19:54 Low 2
2026-10-14 09:19:50 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 13:16:52 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 11:13:20 Low 2
2026-10-12 05:12:20 Medium 2
2026-10-12 00:18:51 Medium 2
2026-10-11 17:10:51 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion