git-wipe-bin

maintainer noirbizarre · 1 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity reflects the unverifiable nature of prebuilt binaries, but the source is trustworthy and checksums are provided.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR binary packages; the low severity reflects the unverifiable nature of prebuilt binaries, but the source is trustworthy and checksums are provided.

PKGBUILD

      1# Maintainer: Axel Haustant <noirbizarre@gmail.com>
    
      2#
    
      3# Prebuilt binary package. `0.4.0`, `c12cc60b1bcf6edfedf8d64a9d6ca128b47256f308aecd288a3d9dc0ecf87fab` and `4c3a587d9d93f2423a1630398fd1a2d53d6413a0987af4f72f38bc081457c6f9`
    
      4# are substituted by .github/workflows/aur.yml from the published release
    
      5# assets.
    
      6
    
      7pkgname=git-wipe-bin
    
      8_pkgname=git-wipe
    
      9pkgver=0.4.0
    
      10pkgrel=1
    
      11pkgdesc="Wipe out merged local branches and worktrees (prebuilt binary)"
    
      12arch=('x86_64' 'aarch64')
    
      13url="https://github.com/noirbizarre/git-wipe"
    
      14license=('MIT')
    
      15depends=('gcc-libs' 'glibc' 'git')
    
      16provides=("$_pkgname=$pkgver")
    
      17# `replaces`/`conflicts` on the pre-rename name so `pacman -Syu` migrates
    
      18# anyone still on git-synchronizer-bin instead of leaving both installed.
    
      19conflicts=("$_pkgname" 'git-synchronizer-bin')
    
      20replaces=('git-synchronizer-bin')
    
      21options=('!strip' '!debug')
    
      22# The upstream archives are named after the target only — the tag in the URL is
    
      23# what pins the version — so they are renamed here to keep makepkg's source
    
      24# cache unambiguous across releases.
    
      25source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/git-wipe-x86_64-unknown-linux-gnu.tar.gz")
    
      26source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::$url/releases/download/v$pkgver/git-wipe-aarch64-unknown-linux-gnu.tar.gz")
    
      27sha256sums_x86_64=('c12cc60b1bcf6edfedf8d64a9d6ca128b47256f308aecd288a3d9dc0ecf87fab')
    
      28sha256sums_aarch64=('4c3a587d9d93f2423a1630398fd1a2d53d6413a0987af4f72f38bc081457c6f9')
    
      29
    
      30package() {
    
      31  # The archives carry no leading directory, so their contents — `git-wipe`,
    
      32  # `man/`, `completions/`, LICENSE and README.md — land straight in $srcdir.
    
      33  cd "$srcdir"
    
      34
    
      35  install -Dm755 git-wipe "$pkgdir/usr/bin/git-wipe"
    
      36
    
      37  # The man pages are not a nicety: git rewrites `git wipe --help` into
    
      38  # `git help wipe`, which runs `man git-wipe` and fails without them.
    
      39  install -Dm644 -t "$pkgdir/usr/share/man/man1" man/*.1
    
      40
    
      41  install -Dm644 completions/git-wipe.bash \
    
      42    "$pkgdir/usr/share/bash-completion/completions/git-wipe"
    
      43  install -Dm644 completions/_git-wipe \
    
      44    "$pkgdir/usr/share/zsh/site-functions/_git-wipe"
    
      45  install -Dm644 completions/git-wipe.fish \
    
      46    "$pkgdir/usr/share/fish/vendor_completions.d/git-wipe.fish"
    
      47
    
      48  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      50}
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 09:32:18	LOW	2