git-ego-bin
The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity reflects the unverifiable binary build but from a trusted project source, not malicious intent.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity reflects the unverifiable binary build but from a trusted project source, not malicious intent.
PKGBUILD
# Maintainer: Enmanuel Moreira <enmanuelmoreira@gmail.com>
pkgname=git-ego-bin
pkgver=0.2.4
pkgrel=2
pkgdesc='Your Git identity manager and automatic profile switcher.'
url='https://github.com/bgreenwell/git-ego'
arch=('x86_64')
license=('MIT')
provides=('git-ego')
conflicts=('git-ego' 'gitego-bin')
# Renamed from gitego-bin after upstream became bgreenwell/git-ego.
replaces=('gitego-bin')
source=("gitego-$pkgver-${arch}.tar.gz::${url}/releases/download/v${pkgver}/git-ego-v${pkgver}-linux-${arch}.tar.gz")
sha256sums=('c4861fffc6944a7974d329adeba96c325fbb1532541a12386e260b906ae3364f')
package() {
cd "${srcdir}"
install -Dm755 "git-ego" "${pkgdir}/usr/bin/git-ego"
# Upstream renamed the binary; keep the old command name working.
ln -s git-ego "${pkgdir}/usr/bin/gitego"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-02 06:02:22 | Low | 2 |