goose-cli-bin

LOW
maintainer orphaned 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice; the low severity is due to the binary being unverifiable but from a trusted project source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice; the low severity is due to the binary being unverifiable but from a trusted project source.

PKGBUILD

1# Maintainer: pbjames <address at domain dot tld>
2pkgname=goose-cli-bin
3_pkgname=goose
4pkgver=stable
5pkgrel=1
6pkgdesc='an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM'
7url='https://github.com/block/goose'
8arch=('x86_64' 'arm64' 'aarch64')
9_file=$_pkgname-$arch-unknown-linux-gnu.tar.bz2
10source=("$_file::$url/releases/download/$pkgver/$_file")
11source_arm64=("$_pkgname-aarch64-unknown-linux-gnu.tar.bz2::$url/releases/download/$pkgver/$_pkgname-aarch64-unknown-linux-gnu.tar.bz2")
12license=('Apache-2.0')
13depends=('libxcb')
14optdepends=('keepassxc: D-bus secret service provider' 'gnome-keyring: GNOME secrets provider' 'kwallet: KDE secrets provider')
15sha256sums=('bc51131961543c9a8b553e3ca72aba1997db84c43b28c0ee461702b403b47a08')
16sha256sums_aarch64=('b4c88a3764ffc90daa6bbd16e7cfa7f0af1bce38afe2acd839a19d9bfe43eeff')
17sha256sums_arm64=('b4c88a3764ffc90daa6bbd16e7cfa7f0af1bce38afe2acd839a19d9bfe43eeff')
18
19package() {
20 cd $srcdir/$file
21 install -Dm755 goose "$pkgdir/usr/bin/goose"
22}
23

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 05:15:42 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion