free-claude-code-bin

maintainer matskuijpers · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a public git repository of the project itself, uses a SKIP'd checksum due to recent changes, and installs a Python application into a virtual environment; while the orphaned/re-adopted status raises mild supply-chain concerns, there is no evidence of malicious behavior or execution of untrusted remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a public git repository of the project itself, uses a SKIP'd checksum due to recent changes, and installs a Python application into a virtual environment; while the orphaned/re-adopted status raises mild supply-chain concerns, there is no evidence of malicious behavior or execution of untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Vitaliy VVS Star <vitaliy <dot> star <at> Gmail-DOT-Com>
    
      2
    
      3pkgname=free-claude-code-bin
    
      4pkgver=2.0.0.r631.23e409c
    
      5pkgrel=1
    
      6pkgdesc="Proxy to use Claude Code CLI with free alternative providers (NVIDIA NIM, OpenRouter, DeepSeek, etc.)"
    
      7arch=('x86_64')
    
      8url="https://github.com/Alishahryar1/free-claude-code"
    
      9license=('MIT')
    
      10depends=('python>=3.14')
    
      11makedepends=('git' 'uv')
    
      12provides=('free-claude-code')
    
      13conflicts=('free-claude-code')
    
      14install="$pkgname.install"
    
      15source=("git+${url}.git")
    
      16sha256sums=('SKIP')
    
      17
    
      18pkgver() {
    
      19  cd "$srcdir/free-claude-code"
    
      20  local ver
    
      21  ver=$(grep '^version =' pyproject.toml | sed 's/version = "\(.*\)"/\1/')
    
      22  printf "%s.r%s.%s" "$ver" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      23}
    
      24
    
      25build() {
    
      26  cd "$srcdir/free-claude-code"
    
      27  uv venv --python /usr/bin/python3 --python-preference only-system "$srcdir/venv"
    
      28  source "$srcdir/venv/bin/activate"
    
      29  uv pip install .
    
      30  deactivate
    
      31}
    
      32
    
      33package() {
    
      34  local venv_dir="/opt/free-claude-code"
    
      35
    
      36  install -dm755 "$pkgdir$venv_dir"
    
      37  cp -a "$srcdir/venv/." "$pkgdir$venv_dir/"
    
      38
    
      39  sed -i "s|$srcdir/venv|$venv_dir|g" "$pkgdir$venv_dir/pyvenv.cfg"
    
      40  find "$pkgdir$venv_dir/bin" -type f -exec sed -i "s|$srcdir/venv|$venv_dir|g" {} +
    
      41  find "$pkgdir$venv_dir/lib" -name '*.pth' -exec sed -i "s|$srcdir/venv|$venv_dir|g" {} +
    
      42  find "$pkgdir$venv_dir/lib" -name 'direct_url.json' -delete
    
      43
    
      44  install -dm755 "$pkgdir/usr/bin"
    
      45  for cmd in fcc-server free-claude-code fcc-init fcc-claude; do
    
      46    if [ -f "$pkgdir$venv_dir/bin/$cmd" ]; then
    
      47      ln -sf "$venv_dir/bin/$cmd" "$pkgdir/usr/bin/$cmd"
    
      48    fi
    
      49  done
    
      50
    
      51  install -Dm644 /dev/stdin "$pkgdir/usr/share/licenses/$pkgname/LICENSE" <<'EOF'
    
      52MIT License
    
      53
    
      54Copyright (c) 2026 Ali Khokhar
    
      55
    
      56Permission is hereby granted, free of charge, to any person obtaining a copy
    
      57of this software and associated documentation files (the "Software"), to deal
    
      58in the Software without restriction, including without limitation the rights
    
      59to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    
      60copies of the Software, and to permit persons to whom the Software is
    
      61furnished to do so, subject to the following conditions:
    
      62
    
      63The above copyright notice and this permission notice shall be included in all
    
      64copies or substantial portions of the Software.
    
      65
    
      66THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    
      67IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    
      68FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    
      69AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    
      70LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    
      71OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    
      72SOFTWARE.
    
      73EOF
    
      74}
    
      75

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0