fvs2-bin

maintainer winniovergaard · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds a CLI tool from its own source repositories (fvs2-lab), downloads are verifiable via checksums, and the only unusual action (sudo in build) runs a local resolver script which is included in the source and checksummed, posing low risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds a CLI tool from its own source repositories (fvs2-lab), downloads are verifiable via checksums, and the only unusual action (sudo in build) runs a local resolver script which is included in the source and checksummed, posing low risk.

PKGBUILD

      1# Maintainer: w568w <w568w at outlook dot com>
    
      2
    
      3_corever=0.1.1
    
      4
    
      5pkgname=fvs2-bin
    
      6pkgver=0.9.0
    
      7pkgrel=2
    
      8pkgdesc='Standalone CLI for FVS v2'
    
      9arch=('x86_64' 'aarch64')
    
      10url='https://github.com/fvs-lab/fvs2'
    
      11license=('MIT')
    
      12depends=('glibc')
    
      13makedepends=('go')
    
      14source=(
    
      15  "fvs2-bin-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz"
    
      16  'resolver'
    
      17  "core-${_corever}.tar.gz::https://github.com/fvs-lab/core/archive/refs/tags/v${_corever}.tar.gz"
    
      18)
    
      19sha256sums=('74aa67ab731c7a25da4a7858cbebdd2a87f361568977b19653651bf2b1979815'
    
      20            '91b417276815752ab7608659b33d09d8d4b3e4d03303c2314685440808a52eb6')
    
      21
    
      22prepare() {
    
      23  local builddir="$srcdir/fvs2-bin-$pkgver"
    
      24
    
      25  # fvs2 depends on core, which is a separate repository. 
    
      26  # We need to symlink it into the source tree to build.
    
      27  rm -f "$srcdir/core"
    
      28  ln -s "core-${_corever}" "$srcdir/core"
    
      29  cd "$builddir"
    
      30
    
      31  export GOMODCACHE="$srcdir/pkg/mod"
    
      32  go mod download -modcacherw
    
      33  mkdir -p build
    
      34}
    
      35
    
      36build() {
    
      37  sudo "$srcdir/resolver"
    
      38  cd "$srcdir/fvs2-bin-$pkgver"
    
      39
    
      40  export CGO_CPPFLAGS="$CPPFLAGS"
    
      41  export CGO_CFLAGS="$CFLAGS"
    
      42  export CGO_CXXFLAGS="$CXXFLAGS"
    
      43  export CGO_LDFLAGS="$LDFLAGS"
    
      44  export GOMODCACHE="$srcdir/pkg/mod"
    
      45  export GOFLAGS='-buildmode=pie -trimpath -mod=readonly -modcacherw'
    
      46
    
      47  go build -ldflags='-linkmode external' -o "build/fvs2-bin" "./cmd/fvs2-bin"
    
      48}
    
      49
    
      50check() {
    
      51  cd "$srcdir/fvs2-bin-$pkgver"
    
      52  "./build/fvs2-bin" --help >/dev/null
    
      53}
    
      54
    
      55package() {
    
      56  cd "$srcdir/fvs2-bin-$pkgver"
    
      57
    
      58  install -Dm755 "build/fvs2-bin" "$pkgdir/usr/bin/fvs2-bin"
    
      59  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/fvs2-bin/LICENSE"
    
      60  install -Dm644 README.md "$pkgdir/usr/share/doc/fvs2-bin/README.md"
    
      61}
    
      62
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 13:20:32	LOW	2