gextant-bin

LOW

maintainer SelfRef 0 votes scanned 2026-11-05 02:08:18.897367

View on AUR

Why flagged

The package downloads a prebuilt binary tarball from the project's GitHub releases, which is a common and acceptable practice; the low severity is due to the lack of votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary tarball from the project's GitHub releases, which is a common and acceptable practice; the low severity is due to the lack of votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=gextant
    
      4pkgname="$_pkgbase-bin"
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='Updates GNOME Shell extensions from their repositories'
    
      8arch=('x86_64')
    
      9url='https://github.com/AperteDev/gextant'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4' 'libadwaita>=1:1.7' 'libsecret' 'glib2' 'ca-certificates' 'libgcc' 'glibc')
    
      12optdepends=('org.freedesktop.secrets: keep the access tokens in the system keyring')
    
      13provides=("$_pkgbase")
    
      14conflicts=("$_pkgbase")
    
      15source_x86_64=("$_pkgbase-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-$pkgver-x86_64.tar.gz")
    
      16noextract=("$_pkgbase-$pkgver-x86_64.tar.gz")
    
      17sha256sums_x86_64=('30e23616b4def6a250d368ade5b44652d4919158e6e54e708017760b3c9d7f6f')
    
      18
    
      19package() {
    
      20	bsdtar -xf "$_pkgbase-$pkgver-x86_64.tar.gz" -C "$pkgdir" --no-same-owner
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 02:08:18	Low	2