freehire-cli (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds a CLI tool from its official GitHub source, applies a benign patch to disable self-updates, and follows standard Go build practices; the low-vote and recent upload are common for new but legitimate AUR packages.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: shbernal <shbernal.01@gmail.com>
    
      2
    
      3pkgname=freehire-cli
    
      4pkgver=0.28.0
    
      5pkgrel=1
    
      6pkgdesc='CLI over the freehire job API for agents'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/strelov1/freehire-cli'
    
      9license=('MIT')
    
      10depends=('glibc')
    
      11makedepends=('go')
    
      12source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz"
    
      13        "disable-self-update.patch")
    
      14sha256sums=('ae77fcf15cda8fc9f459633a2d0184efef7f21cbf802587244812b4052fa5c86'
    
      15            '864a3c11939dfcd48fbe994d3771aa2a4f9d3e7332daa2e92b53fe02de212087')
    
      16
    
      17prepare() {
    
      18  cd "${pkgname}-${pkgver}"
    
      19
    
      20  patch -Np1 -i ../disable-self-update.patch
    
      21}
    
      22
    
      23build() {
    
      24  cd "${pkgname}-${pkgver}"
    
      25
    
      26  export GOPATH="${srcdir}"
    
      27  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      28  export CGO_CFLAGS="${CFLAGS}"
    
      29  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      30  export CGO_LDFLAGS="${LDFLAGS}"
    
      31  export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      32
    
      33  local cli=github.com/strelov1/freehire-cli/internal/cli
    
      34  local update_hint="installed from the AUR package ${pkgname}, update it with your AUR helper (e.g. paru or yay)"
    
      35  go build \
    
      36    -ldflags "-compressdwarf=false -linkmode external -X ${cli}.Version=v${pkgver} -X '${cli}.UpdateDisabled=${update_hint}'" \
    
      37    -o freehire ./cmd/freehire
    
      38}
    
      39
    
      40check() {
    
      41  cd "${pkgname}-${pkgver}"
    
      42
    
      43  go test ./...
    
      44}
    
      45
    
      46package() {
    
      47  cd "${pkgname}-${pkgver}"
    
      48
    
      49  install -Dm755 freehire "${pkgdir}/usr/bin/freehire"
    
      50  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      51  install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      52}
    
      53

Changes since previous scan

--- PKGBUILD @ 2026-10-27 00:23
+++ PKGBUILD @ 2026-10-30 00:29
@@ -1,7 +1,7 @@
 # Maintainer: shbernal <shbernal.01@gmail.com>
 
 pkgname=freehire-cli
-pkgver=0.26.3
+pkgver=0.28.0
 pkgrel=1
 pkgdesc='CLI over the freehire job API for agents'
 arch=('x86_64' 'aarch64')
@@ -11,7 +11,7 @@
 makedepends=('go')
 source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz"
         "disable-self-update.patch")
-sha256sums=('b859dbe9d64bf7a67a693938a237e6a7b85071c660690f9ece58cc1b3a969ee7'
+sha256sums=('ae77fcf15cda8fc9f459633a2d0184efef7f21cbf802587244812b4052fa5c86'
             '864a3c11939dfcd48fbe994d3771aa2a4f9d3e7332daa2e92b53fe02de212087')
 
 prepare() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-30 00:29:30	Clean	2
2026-10-29 21:53:30	Low	1
2026-10-27 00:23:28	Clean	2
2026-10-26 17:46:00	Low	1