forskscope-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

Package downloads prebuilt binary from GitHub releases and auxiliary files from raw content; host is GitHub which is plausibly project-owned, but prebuilt binary introduces supply-chain risk if not built from source, though no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads prebuilt binary from GitHub releases and auxiliary files from raw content; host is GitHub which is plausibly project-owned, but prebuilt binary introduces supply-chain risk if not built from source, though no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=forskscope
    
      4_gitname=forskscope
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="Local-first cross-platform diff and merge tool"
    
      8
    
      9pkgver=0.180.0
    
      10pkgrel=1
    
      11
    
      12arch=('x86_64')
    
      13_barch=('linux-x86_64')
    
      14
    
      15_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      16_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${pkgver}"
    
      17url=${_ghurl}
    
      18
    
      19license=('Apache-2.0')
    
      20
    
      21provides=("${_appname}")
    
      22conflicts=("${pkgname%-bin}")
    
      23
    
      24makedepends=('patchelf')
    
      25depends=('git' 'webkit2gtk-4.1' 'glib2' 'gtk3' 'gdk-pixbuf2' 'xdotool' 'openssl' 'libsoup3' 'cairo')
    
      26
    
      27options=('!strip')
    
      28
    
      29source=("LAUNCHER-${pkgver}.desktop::${_ghurlraw}/packaging/linux/${_appname}.desktop"
    
      30		"ICON-${pkgver}.png::${_ghurlraw}/docs/src/assets/logo.png"
    
      31		"README-${pkgver}.md::${_ghurlraw}/README.md"
    
      32		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE"
    
      33		"NOTICE-${pkgver}::${_ghurlraw}/NOTICE")
    
      34source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${pkgver}/${_appname}-v${pkgver}-${_barch[0]}.tar.gz")
    
      35sha256sums=('720e9852dc03d0f7241160a598785cf64a7001ea83be0e2ce127d886488d1b95'
    
      36            '35766d3d70744fb8fe544fa89e50592749003cc99e35b7d65a6b12a02002e692'
    
      37            'ea9c739abd3e9f46317b7b23f7e67e60e67828a30b10c21d7fe35a047be68165'
    
      38            'f651689716d7e61870c050334baf1bfc0e44a2fb8f39c68b2a1412de140f97fe'
    
      39            '8aa452d4de64938dbe60eb883a57780f7cb889a96db3c29aaa5fb9b9966de004')
    
      40sha256sums_x86_64=('c5847707fbf9a0a2675cb93f0499e8349ae6af3fc76f7f0272f3e1c91d4dc6b3')
    
      41
    
      42
    
      43prepare() {
    
      44	cd "${srcdir}/" || exit
    
      45
    
      46	patchelf --replace-needed "libxdo.so.3" "libxdo.so.4" "${_appname}"
    
      47}
    
      48
    
      49package() {
    
      50	cd "${srcdir}/" || exit
    
      51
    
      52	install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
    
      53
    
      54	install -Dm644 "LAUNCHER-${pkgver}.desktop" "${pkgdir}/usr/share/applications/${_appname}.desktop"
    
      55	install -Dm644 "ICON-${pkgver}.png" "${pkgdir}/usr/share/icons/${_appname}.png"
    
      56
    
      57	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      58
    
      59	install -Dm644 "NOTICE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/NOTICE"
    
      60	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	2