foldav-bin

LOW

maintainer SelfRef 0 votes scanned 2026-11-05 02:08:18.897367

View on AUR

Why flagged

The package downloads a prebuilt release binary from the project's official GitHub repository; while the host is not whitelisted, it is a legitimate source for project releases, and the binary is not executed during build but installed as-is, with no obfuscation or remote code execution observed.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt release binary from the project's official GitHub repository; while the host is not whitelisted, it is a legitimate source for project releases, and the binary is not executed during build but installed as-is, with no obfuscation or remote code execution observed.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=foldav
    
      4pkgname="$_pkgbase-bin"
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='A file manager for the files in your Nextcloud'
    
      8arch=('x86_64')
    
      9url='https://github.com/AperteDev/foldav'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4' 'libadwaita>=1:1.8' 'libsecret' 'sqlite' 'glib2' 'libgcc' 'glibc')
    
      12optdepends=('gnome-online-accounts: sign in with a GNOME Online Accounts account'
    
      13            'org.freedesktop.secrets: keep the passwords in the system keyring')
    
      14provides=("$_pkgbase")
    
      15conflicts=("$_pkgbase")
    
      16source_x86_64=("$_pkgbase-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-$pkgver-x86_64.tar.gz")
    
      17noextract=("$_pkgbase-$pkgver-x86_64.tar.gz")
    
      18sha256sums_x86_64=('98373edaf03ae5c20c428eef4711197a390e8efe0edf5d2b3977aac775d5ce66')
    
      19
    
      20package() {
    
      21	bsdtar -xf "$_pkgbase-$pkgver-x86_64.tar.gz" -C "$pkgdir" --no-same-owner
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 02:08:18	Low	2