floci-cli-bin

LOW

maintainer ppalazon 0 votes scanned 2026-10-22 13:35:05.775257

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the binary is executed during prepare() to generate completions, but this is done in a controlled way with an environment variable disabling update checks, and the source is properly checksummed, making the risk low despite the binary not being built from source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the binary is executed during prepare() to generate completions, but this is done in a controlled way with an environment variable disabling update checks, and the source is properly checksummed, making the risk low despite the binary not being built from source.

PKGBUILD

      1# Maintainer: Pablo Palazon <ppalazon@phyxor.com>
    
      2
    
      3pkgname=floci-cli-bin
    
      4pkgver=0.4.0
    
      5pkgrel=1
    
      6pkgdesc="Command-line interface for Floci local cloud emulators"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/floci-io/floci-cli"
    
      9license=('MIT')
    
      10depends=('glibc' 'zlib')
    
      11optdepends=(
    
      12  'docker: run and manage Floci emulator containers'
    
      13  'bash: using shell completions'
    
      14)
    
      15provides=('floci-cli')
    
      16conflicts=('floci-cli')
    
      17options=('!strip' '!debug')
    
      18source=("$pkgname-$pkgver-LICENSE.txt::https://raw.githubusercontent.com/floci-io/floci-cli/$pkgver/LICENSE")
    
      19source_x86_64=("floci-$pkgver::$url/releases/download/$pkgver/floci-linux-amd64")
    
      20source_aarch64=("floci-$pkgver::$url/releases/download/$pkgver/floci-linux-arm64")
    
      21noextract=("floci-$pkgver")
    
      22sha256sums=('76ab864e89fba40a87ed6ad64ca0abab6957e98c419930916db8825fd6109d8a')
    
      23sha256sums_x86_64=('cdf4603e169a030b57d18b2fff6ef3f6a4ad45a2bbf137992cb9cf691c4620f8')
    
      24sha256sums_aarch64=('62b2d1c202f5041d545e5ae681a38dc9dc148fb355a0b8b203dcae0b0951637b')
    
      25
    
      26prepare() {
    
      27  chmod +x "floci-$pkgver"
    
      28  FLOCI_NO_UPDATE_CHECK=1 "./floci-$pkgver" completion bash >floci.bash
    
      29  sed -i '1{/^#!\/usr\/bin\/env bash$/d}' floci.bash
    
      30}
    
      31
    
      32check() {
    
      33  FLOCI_NO_UPDATE_CHECK=1 "./floci-$pkgver" --help >/dev/null
    
      34  bash -n floci.bash
    
      35}
    
      36
    
      37package() {
    
      38  install -Dm755 "floci-$pkgver" "$pkgdir/usr/bin/floci"
    
      39  install -Dm644 floci.bash "$pkgdir/usr/share/bash-completion/completions/floci"
    
      40  install -Dm644 "$pkgname-$pkgver-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 13:35:05	Low	2