foldmason-bin

maintainer imjiaoyuan · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a precompiled binary from the project's official GitHub releases, which is a normal distribution method for static binaries; the low severity is due to the unverifiable binary release but from a trusted project source.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a precompiled binary from the project's official GitHub releases, which is a normal distribution method for static binaries; the low severity is due to the unverifiable binary release but from a trusted project source.

PKGBUILD

      1# Maintainer: imjiaoyuan <imjiaoyuan@gmail.com>
    
      2
    
      3pkgname=foldmason-bin
    
      4_pkgname=foldmason
    
      5_tag=4-dd3c235
    
      6pkgver=4_dd3c235
    
      7pkgrel=1
    
      8pkgdesc="Multiple protein structure alignment at scale (precompiled binary)"
    
      9arch=('x86_64')
    
      10url="https://github.com/steineggerlab/foldmason"
    
      11license=('GPL3')
    
      12depends=()
    
      13provides=("${_pkgname}=${pkgver}")
    
      14conflicts=("${_pkgname}")
    
      15options=('!strip' '!debug')
    
      16source=("${url}/releases/download/${_tag}/foldmason-linux-avx2.tar.gz")
    
      17sha256sums=('7e6f6bd264defda742882ec167eedaad1185c0a83a32646b1ec83fa6c5b86f05')
    
      18
    
      19# Upstream ships a statically-linked binary (ldd: not a dynamic executable),
    
      20# so there are no runtime shared-library deps and no build step. The release
    
      21# tarball bundles LICENSE.md.
    
      22
    
      23package() {
    
      24    install -Dm755 "${srcdir}/${_pkgname}/bin/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      25    install -Dm644 "${srcdir}/${_pkgname}/LICENSE.md" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.md"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 13:36:23	LOW	2
2026-08-17 05:35:16	LOW	2