gill (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from source hosted on the project's own GitHub repository, uses standard Rust build practices, and installs only the resulting binary; no remote code execution, obfuscation, or untrusted dependencies are present.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: sachesi <xsachesi@pm.me>
    
      2
    
      3# pkgver and sha256sums are filled in by .github/workflows/aur.yml for each release.
    
      4pkgname=gill
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc="Run the bash lines fish cannot, and keep bash's state between them"
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/sachesi/gill'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('bash>=5.0' 'fish>=4.0' 'glibc' 'libgcc')
    
      12makedepends=('cargo')
    
      13checkdepends=('tmux')
    
      14source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver/$pkgname-$pkgver.tar.gz")
    
      15sha256sums=('3a680b2a0fc6da9126d0e8aa0fb1b93aec12a3a263fa4560c32bc97ed47bcb01')
    
      16
    
      17prepare() {
    
      18  cd "$pkgname-$pkgver"
    
      19  export RUSTUP_TOOLCHAIN=stable
    
      20  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      21}
    
      22
    
      23build() {
    
      24  cd "$pkgname-$pkgver"
    
      25  export RUSTUP_TOOLCHAIN=stable
    
      26  export CARGO_TARGET_DIR=target
    
      27  cargo build --frozen --release
    
      28}
    
      29
    
      30check() {
    
      31  cd "$pkgname-$pkgver"
    
      32  export RUSTUP_TOOLCHAIN=stable
    
      33  export CARGO_TARGET_DIR=target
    
      34  cargo test --frozen
    
      35}
    
      36
    
      37package() {
    
      38  cd "$pkgname-$pkgver"
    
      39  install -Dm755 target/release/gill -t "$pkgdir/usr/bin"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Clean	2
2026-11-01 22:01:45	Low	1