git-synchronizer-bin

maintainer orphaned · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR pattern; the binary is not executed at build/install time, and the source is verifiable via checksums.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR pattern; the binary is not executed at build/install time, and the source is verifiable via checksums.

PKGBUILD

      1# Maintainer: Axel Haustant <noirbizarre@gmail.com>
    
      2#
    
      3# Prebuilt binary package. `0.3.0`, `6b45f6afcc9cfdb44d9dd6de0c34cfe5812a0d624b26e798c3566c48699cac16` and `236a36ef8859967afb22efa85291522b083019cadc7fd6d6fac934fc7b6de94b`
    
      4# are substituted by .github/workflows/aur.yml from the published release
    
      5# assets.
    
      6
    
      7pkgname=git-synchronizer-bin
    
      8_pkgname=git-synchronizer
    
      9pkgver=0.3.0
    
      10pkgrel=1
    
      11pkgdesc="Easily synchronize your local branches and worktrees (prebuilt binary)"
    
      12arch=('x86_64' 'aarch64')
    
      13url="https://github.com/noirbizarre/git-synchronizer"
    
      14license=('MIT')
    
      15depends=('gcc-libs' 'glibc' 'git')
    
      16provides=("$_pkgname=$pkgver" 'git-sync')
    
      17conflicts=("$_pkgname")
    
      18options=('!strip' '!debug')
    
      19# The upstream archives are named after the target only — the tag in the URL is
    
      20# what pins the version — so they are renamed here to keep makepkg's source
    
      21# cache unambiguous across releases.
    
      22source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/git-sync-x86_64-unknown-linux-gnu.tar.gz")
    
      23source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::$url/releases/download/v$pkgver/git-sync-aarch64-unknown-linux-gnu.tar.gz")
    
      24sha256sums_x86_64=('6b45f6afcc9cfdb44d9dd6de0c34cfe5812a0d624b26e798c3566c48699cac16')
    
      25sha256sums_aarch64=('236a36ef8859967afb22efa85291522b083019cadc7fd6d6fac934fc7b6de94b')
    
      26
    
      27package() {
    
      28  # The archives carry no leading directory, so their contents — `git-sync`,
    
      29  # `man/`, `completions/`, LICENSE and README.md — land straight in $srcdir.
    
      30  cd "$srcdir"
    
      31
    
      32  install -Dm755 git-sync "$pkgdir/usr/bin/git-sync"
    
      33
    
      34  # The man pages are not a nicety: git rewrites `git sync --help` into
    
      35  # `git help sync`, which runs `man git-sync` and fails without them.
    
      36  install -Dm644 -t "$pkgdir/usr/share/man/man1" man/*.1
    
      37
    
      38  install -Dm644 completions/git-sync.bash \
    
      39    "$pkgdir/usr/share/bash-completion/completions/git-sync"
    
      40  install -Dm644 completions/_git-sync \
    
      41    "$pkgdir/usr/share/zsh/site-functions/_git-sync"
    
      42  install -Dm644 completions/git-sync.fish \
    
      43    "$pkgdir/usr/share/fish/vendor_completions.d/git-sync.fish"
    
      44
    
      45  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      46  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 23:31:34	LOW	2