forge-ide-bin

LOW
maintainer extremtechniker 0 votes scanned 2026-11-05 22:10:45.226294
View on AUR
Why flagged

The package installs a prebuilt IDE binary from a GitHub release, which is a normal distribution method for AUR binary packages; the source is verifiable and checksummed, and no malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt IDE binary from a GitHub release, which is a normal distribution method for AUR binary packages; the source is verifiable and checksummed, and no malicious behavior is present.

PKGBUILD

1# Maintainer: ExtremTechniker <aur@extremtechniker.io>
2pkgname=forge-ide-bin
3# Forge's version as released; pacman's pkgver cannot contain "-", so a pre-release drops it
4# (0.1.1-beta.1 -> 0.1.1beta.1, which pacman sorts before the final 0.1.1).
5_ver=0.1.1-beta.1
6pkgver=${_ver//-/}
7pkgrel=1
8pkgdesc="PHPStorm-style IDE for PHP, web and Lua (prebuilt release)"
9arch=('x86_64')
10url="https://github.com/Reeperk/Forge"
11license=('MIT')
12depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator' 'openssl' 'hicolor-icon-theme')
13provides=("forge-ide=$pkgver")
14conflicts=('forge-ide' 'forge' 'foundry')
15options=('!strip' '!debug')
16# The release carries the .deb that Tauri builds; makepkg unpacks it into $srcdir.
17source_x86_64=("Forge_${_ver}_amd64.deb::https://github.com/stdimnet/forge-ide-bin/releases/download/v0.1.1-beta.1/Forge_0.1.1-beta.1_amd64.deb")
18# Fill in with `updpkgsums` once the release exists.
19sha256sums_x86_64=('aa3e180c0c74b078a60a082e42d5d93f8d4ef4a3d37c15787ac07c2cb9abd24c')
20
21package() {
22 bsdtar -xf "$srcdir"/data.tar.* -C "$pkgdir"
23 chmod -R go-w "$pkgdir"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-11-05 22:10:45 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion