fibertools-rs-bin

LOW

maintainer imjiaoyuan 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub release page, which is a normal practice for AUR packages; the low severity is due to the lack of license file in upstream and few votes, but the source is trustworthy and no malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub release page, which is a normal practice for AUR packages; the low severity is due to the lack of license file in upstream and few votes, but the source is trustworthy and no malicious behavior is present.

PKGBUILD

      1# Maintainer: imjiaoyuan <imjiaoyuan@gmail.com>
    
      2# cargo-dist release artifacts (glibc x86_64 build); no aarch64 linux binary
    
      3# is published, so the source package covers that arch. The tarball carries
    
      4# only the ft binary plus README/CHANGELOG; no license file ships anywhere
    
      5# (repo, crate, release tarball), Cargo.toml says MIT, so the text is written
    
      6# out here with the author's attribution.
    
      7
    
      8pkgname=fibertools-rs-bin
    
      9_pkgname=fibertools-rs
    
      10_tag=v0.13.1
    
      11pkgver=0.13.1
    
      12pkgrel=1
    
      13pkgdesc="Fiber-seq toolkit for creating and interacting with Fiber-seq BAM files"
    
      14arch=('x86_64')
    
      15url="https://github.com/fiberseq/fibertools-rs"
    
      16license=('MIT')
    
      17depends=('glibc' 'libgcc')
    
      18provides=("fibertools-rs=$pkgver")
    
      19conflicts=('fibertools-rs')
    
      20options=('!strip' '!debug')
    
      21source=("$url/releases/download/$_tag/$_pkgname-x86_64-unknown-linux-gnu.tar.xz")
    
      22sha256sums=('080d5178b75948d4579843414d74ecec65367b6d708879551a91f9d16bb7380f')
    
      23
    
      24package() {
    
      25    install -Dm755 "$srcdir/$_pkgname-x86_64-unknown-linux-gnu/ft" "$pkgdir/usr/bin/ft"
    
      26    cat > LICENSE <<'EOF'
    
      27MIT License
    
      28
    
      29Copyright (c) 2021 Mitchell R. Vollger
    
      30
    
      31Permission is hereby granted, free of charge, to any person obtaining a copy
    
      32of this software and associated documentation files (the "Software"), to deal
    
      33in the Software without restriction, including without limitation the rights
    
      34to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    
      35copies of the Software, and to permit persons to whom the Software is
    
      36furnished to do so, subject to the following conditions:
    
      37
    
      38The above copyright notice and this permission notice shall be included in all
    
      39copies or substantial portions of the Software.
    
      40
    
      41THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    
      42IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    
      43FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    
      44AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    
      45LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    
      46OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    
      47SOFTWARE.
    
      48EOF
    
      49    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      50}
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 08:13:38	Low	2