gitwig-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-08-25 01:25:31.914321

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it comes from the project's official repository, reducing risk, and the rest of the build process is transparent and follows standard AUR practices.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it comes from the project's official repository, reducing risk, and the rest of the build process is transparent and follows standard AUR practices.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=tareqmy
    
      4_gitname=gitwig
    
      5_appname=${_gitname}
    
      6_alias=gtg
    
      7pkgname=${_appname}-bin
    
      8pkgdesc="A rust based tui an alternative to sourcetree"
    
      9
    
      10pkgver=2.5.10
    
      11pkgrel=1
    
      12_gitversion=v${pkgver}
    
      13
    
      14arch=('x86_64')
    
      15_barch=('x86_64-unknown-linux-musl')
    
      16
    
      17_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      18_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      19url=${_ghurl}
    
      20
    
      21license=('MIT')
    
      22
    
      23provides=("${_appname}" "${_alias}")
    
      24conflicts=("${_appname}")
    
      25
    
      26makedepends=('git')
    
      27depends=('git' 'openssh')
    
      28
    
      29options=('!strip')
    
      30
    
      31source=("README-${pkgver}.md::${_ghurlraw}/README.md"
    
      32		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
    
      33source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_gitversion}-${_barch[0]}.tar.gz")
    
      34sha256sums=('8dcf88576d0444711b6bd95a3de612f5ef9390b16e81a55708c687435ef48e39'
    
      35            '218c40f12f8eb9be0e6cdf365bbbf3e4c0fded5319e1bbff631f747336188e43')
    
      36sha256sums_x86_64=('a8527ff0a65521e69c96ca15189b26fde10146834e5a16db03f408e22895ed21')
    
      37
    
      38
    
      39prepare() {
    
      40	cd "${srcdir}/" || exit
    
      41
    
      42	rm -rf git && git clone -n --depth=1 --filter=tree:0 --branch "${_gitversion}" "${_ghurl}" git && cd git
    
      43
    
      44	git sparse-checkout set --no-cone /docs && git checkout
    
      45}
    
      46
    
      47package() {
    
      48	cd "${srcdir}/" || exit
    
      49
    
      50	install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
    
      51	ln -sf "/usr/bin/${_appname}" "${pkgdir}/usr/bin/${_alias}"
    
      52
    
      53	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      54
    
      55	for doc in git/docs/*.md; do
    
      56		install -Dm644 "${doc}" "${pkgdir}/usr/share/doc/${pkgname}/$(name=$(basename "${doc}" .md); echo "${name^^}.md")"
    
      57	done
    
      58
    
      59	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      60}
    
      61

Changes since previous scan

--- PKGBUILD @ 2026-08-17 00:18
+++ PKGBUILD @ 2026-08-25 01:25
@@ -7,7 +7,7 @@
 pkgname=${_appname}-bin
 pkgdesc="A rust based tui an alternative to sourcetree"
 
-pkgver=2.5.9
+pkgver=2.5.10
 pkgrel=1
 _gitversion=v${pkgver}
 
@@ -31,9 +31,9 @@
 source=("README-${pkgver}.md::${_ghurlraw}/README.md"
 		"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
 source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_gitversion}-${_barch[0]}.tar.gz")
-sha256sums=('48e8bd18a6120e00c553c5e854044f6313e4802919c2c7f71b3ccb1aacb6ef67'
+sha256sums=('8dcf88576d0444711b6bd95a3de612f5ef9390b16e81a55708c687435ef48e39'
             '218c40f12f8eb9be0e6cdf365bbbf3e4c0fded5319e1bbff631f747336188e43')
-sha256sums_x86_64=('e8e613e8bcda74651501954bdd19397431d26304410d101469aff29146956b4a')
+sha256sums_x86_64=('a8527ff0a65521e69c96ca15189b26fde10146834e5a16db03f408e22895ed21')
 
 
 prepare() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-25 01:25:31	Low	2
2026-08-17 00:18:29	Clean	2
2026-08-16 15:32:49	Low	1
2026-08-16 00:03:42	Clean	2
2026-08-15 07:30:18	Low	1
2026-08-15 00:26:13	Clean	2
2026-08-14 05:27:47	Low	1
2026-08-14 00:03:41	Clean	2
2026-08-13 05:25:33	Low	1
2026-08-13 00:17:07	Low	2
2026-08-12 00:27:08	Low	2
2026-08-11 13:21:13	Low	2