gmpublished-bin

LOW
maintainer charlesm 1 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package downloads a prebuilt binary from a GitHub release by a maintainer with few votes and recent activity, but the binary is from a plausible project source and installs only application files without executing remote code or exfiltrating data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release by a maintainer with few votes and recent activity, but the binary is from a plausible project source and installs only application files without executing remote code or exfiltrating data.

PKGBUILD

1# Maintainer: Charles Mills <charles@charlesmills.dev>
2
3pkgname=gmpublished-bin
4_pkgname=gmpublished
5_github_repo='charles-mills/gmpublished'
6pkgver=0.2.5
7_release_tag="v${pkgver}"
8pkgrel=1
9pkgdesc="Native Workshop publishing and addon inspection utility for Garry's Mod"
10arch=('x86_64')
11url="https://github.com/${_github_repo}"
12license=('GPL-3.0-only' 'LicenseRef-Steamworks-SDK')
13
14depends=(
15 'alsa-lib'
16 'dbus'
17 'fontconfig'
18 'gcc-libs'
19 'glibc'
20 'hicolor-icon-theme'
21 'libglvnd'
22 'libx11'
23 'libxcb'
24 'libxcursor'
25 'libxi'
26 'libxkbcommon'
27 'libxkbcommon-x11'
28 'vulkan-icd-loader'
29 'wayland'
30)
31checkdepends=('desktop-file-utils')
32optdepends=(
33 'steam: Workshop publishing and Garry'"'"'s Mod detection; must be running and signed in'
34 'vulkan-driver: hardware-accelerated rendering; falls back to the OpenGL backend without one'
35 'xdg-desktop-portal: required for open/save dialogs, with a backend such as xdg-desktop-portal-gtk'
36 'xdg-utils: open files and folders in the file manager'
37)
38provides=("${_pkgname}=${pkgver}")
39conflicts=("${_pkgname}")
40options=('!strip' '!debug')
41source=(
42 "${_pkgname}-${pkgver}-${CARCH}-linux.zip::\
43${url}/releases/download/${_release_tag}/${_pkgname}-${pkgver}-${CARCH}-linux.zip"
44)
45sha256sums=('b7178234f4dc5436e304f84a77fdf540d64123348f1eaf5f7ec293c7fc4376d4')
46
47check() {
48 desktop-file-validate "${srcdir}/share/applications/${_pkgname}.desktop"
49}
50
51package() {
52 install -Dm755 "${srcdir}/${_pkgname}" \
53 "${pkgdir}/usr/lib/${_pkgname}/${_pkgname}"
54 install -Dm644 "${srcdir}/libsteam_api.so" \
55 "${pkgdir}/usr/lib/${_pkgname}/libsteam_api.so"
56
57 install -d "${pkgdir}/usr/bin"
58 ln -s "../lib/${_pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
59
60 install -Dm644 "${srcdir}/LICENSE" \
61 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
62 install -Dm644 "${srcdir}/THIRD-PARTY-NOTICES.md" \
63 "${pkgdir}/usr/share/licenses/${pkgname}/THIRD-PARTY-NOTICES.md"
64
65 install -d "${pkgdir}/usr/share"
66 cp -r "${srcdir}/share/." "${pkgdir}/usr/share/"
67 find "${pkgdir}/usr/share" -type d -exec chmod 755 {} +
68 find "${pkgdir}/usr/share" -type f -exec chmod 644 {} +
69}
70

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 21:14:41 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion