golang-jwt-git

CLEAN
maintainer noraj 0 votes scanned 2026-09-26 00:12:15.973514
View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the project's own source on GitHub, which is normal for AUR packages; the few votes and recent upload are not indicators of malice.

1 higher static finding superseded - not the current verdict (shown for transparency)
Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1# Maintainer: noraj <printf %s 'YWxleGFuZHJlLnphbm5pQGV1cm9wZS5jb20='|base64 -d>
2
3pkgname=golang-jwt-git
4_namespace=golang-jwt
5_projectname=jwt
6pkgver=5.3.1.r8.g73c870b
7pkgrel=1
8pkgdesc='Go JWT simple CLI to sign, verify and show tokens.'
9arch=('x86_64' 'aarch64')
10url='https://golang-jwt.github.io/jwt/'
11license=('MIT')
12depends=()
13makedepends=('git' 'go')
14source=("git+https://github.com/$_namespace/$_projectname.git")
15sha512sums=('SKIP')
16conflicts=('golang-jwt')
17provides=('golang-jwt')
18
19pkgver() {
20 cd $_projectname
21
22 ( set -o pipefail
23 git describe --long --tags --abbrev=7 2>/dev/null |
24 sed 's/^v\([0-9]\)/\1/;s/\([^-]*-g\)/r\1/;s/-/./g' ||
25 printf "%s.%s" "$(git rev-list --count HEAD)" \
26 "$(git rev-parse --short=7 HEAD)"
27 )
28}
29
30build() {
31 cd $_projectname
32
33 GOPATH="$srcdir" go mod download
34 GOPATH="$srcdir" go build \
35 -trimpath \
36 -buildmode=pie \
37 -mod=readonly \
38 -modcacherw \
39 -ldflags "-s -w" \
40 -o $_projectname ./cmd/$_projectname
41}
42
43package() {
44 cd $_projectname
45
46 install -Dm 755 $_projectname "$pkgdir/usr/bin/$_namespace"
47 install -Dm 644 -t "$pkgdir/usr/share/doc/$_namespace/" README.md
48 install -Dm 644 LICENSE "$pkgdir/usr/share/licenses/$_namespace/LICENSE"
49}
50
51

Scan history

Scanned at (UTC)SeverityRules
2026-09-26 00:12:15 Clean 2
2026-09-25 23:13:47 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion