forgecode-bin2

maintainer DepsCian · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a pre-built binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary not being built from source, but the source is verifiable and checksummed, reducing risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a pre-built binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary not being built from source, but the source is verifiable and checksummed, reducing risk.

PKGBUILD

      1pkgname=forgecode-bin2
    
      2pkgver=2.13.21
    
      3pkgrel=1
    
      4pkgdesc="CLI code assistant; pre-built upstream binary"
    
      5arch=('x86_64' 'aarch64')
    
      6url="https://github.com/tailcallhq/forgecode"
    
      7license=('Apache-2.0')
    
      8provides=('forgecode-bin' 'forge')
    
      9conflicts=('forgecode-bin' 'forge')
    
      10depends=('fzf' 'bat' 'fd')
    
      11_baseurl=https://github.com/tailcallhq/forgecode/releases/download/v${pkgver}
    
      12source_x86_64=("forge::${_baseurl}/forge-x86_64-unknown-linux-gnu")
    
      13source_aarch64=("forge::${_baseurl}/forge-aarch64-unknown-linux-gnu")
    
      14source=("LICENSE")
    
      15sha256sums_x86_64=('300acf69e39ea5a452e6544f3191470317a14226b6b1a91821c95815e07a8b88')
    
      16sha256sums_aarch64=('b9336b652c1233a07dea8eb4e864785e03c1d9706025768a19ac3b6646936539')
    
      17sha256sums=('3c9f90350449325ae2b1355d6aae26df25be58f1cfcb8ed6a44b9c4b10c663f9')
    
      18
    
      19package() {
    
      20  install -Dm0755 forge "$pkgdir/usr/bin/forge"
    
      21  ln -sf forge "$pkgdir/usr/bin/forgecode"
    
      22
    
      23  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      24}
    
      25

Changes since previous scan

--- PKGBUILD @ 2026-08-01 00:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,5 +1,5 @@
 pkgname=forgecode-bin2
-pkgver=2.13.20
+pkgver=2.13.21
 pkgrel=1
 pkgdesc="CLI code assistant; pre-built upstream binary"
 arch=('x86_64' 'aarch64')
@@ -12,8 +12,8 @@
 source_x86_64=("forge::${_baseurl}/forge-x86_64-unknown-linux-gnu")
 source_aarch64=("forge::${_baseurl}/forge-aarch64-unknown-linux-gnu")
 source=("LICENSE")
-sha256sums_x86_64=('1c00df3276e1c0b80793c3ad0b16ef2f91fb4de9f7b9882653976b276d0d38fd')
-sha256sums_aarch64=('4b8a91e26ed527e36965c8b45d2255b95d78b3099ba71a389b6f066033632acf')
+sha256sums_x86_64=('300acf69e39ea5a452e6544f3191470317a14226b6b1a91821c95815e07a8b88')
+sha256sums_aarch64=('b9336b652c1233a07dea8eb4e864785e03c1d9706025768a19ac3b6646936539')
 sha256sums=('3c9f90350449325ae2b1355d6aae26df25be58f1cfcb8ed6a44b9c4b10c663f9')
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 09:20:18	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 09:14:07	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 11:38:42	LOW	2