fgj-bin

LOW

maintainer romaintb 0 votes scanned 2026-10-26 11:44:54.928123

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official Codeberg release page, which is a normal AUR practice; the low severity is due to the binary being unverifiable but from a plausible project-owned source, not due to active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official Codeberg release page, which is a normal AUR practice; the low severity is due to the binary being unverifiable but from a plausible project-owned source, not due to active malice.

PKGBUILD

      1# Maintainer: Romain Bertrand <romaintb@noreply.codeberg.org>
    
      2pkgname=fgj-bin
    
      3pkgver=0.6.0
    
      4pkgrel=1
    
      5pkgdesc="A command-line tool for working with Forgejo instances (including Codeberg.org) (prebuilt binary)"
    
      6arch=('x86_64' 'aarch64' 'armv7h')
    
      7url="https://codeberg.org/romaintb/fgj"
    
      8license=('MIT')
    
      9provides=('fgj')
    
      10conflicts=('fgj')
    
      11source=("LICENSE-${pkgver}::https://codeberg.org/romaintb/fgj/raw/tag/v${pkgver}/LICENSE"
    
      12        "README-${pkgver}.md::https://codeberg.org/romaintb/fgj/raw/tag/v${pkgver}/README.md")
    
      13source_x86_64=("fgj-${pkgver}-x86_64::https://codeberg.org/romaintb/fgj/releases/download/v${pkgver}/fgj_linux_amd64")
    
      14source_aarch64=("fgj-${pkgver}-aarch64::https://codeberg.org/romaintb/fgj/releases/download/v${pkgver}/fgj_linux_arm64")
    
      15source_armv7h=("fgj-${pkgver}-armv7h::https://codeberg.org/romaintb/fgj/releases/download/v${pkgver}/fgj_linux_arm")
    
      16sha256sums=('aa9cc5b4501bafe72ecf5db0e1a01d9e2c740f942ef0e78a638d7329fac1ba90'
    
      17            '02c88ba55ef16ed11d34dd992dba58ea129c5639e75651f0f6a03c558f8a99d4')
    
      18sha256sums_x86_64=('185a789d1ace2690d2b44615fe8cc7b760b647aea48e8a4ce8a43695bf91a6f4')
    
      19sha256sums_aarch64=('33f3b8b656319ec8553b1d65d935ab7702610abc62ae080e9088aaa7ee7e33d0')
    
      20sha256sums_armv7h=('1675ba1a0c72a6497a2fcedb7a60cef128d17835a5a03577eccb78332e733847')
    
      21
    
      22package() {
    
      23  install -Dm755 "fgj-${pkgver}-${CARCH}" "${pkgdir}/usr/bin/fgj"
    
      24  install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      25  install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-26 11:44:54	Low	2