grm

LOW
maintainer hakoerber 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package builds from source hosted on the project's own GitHub release, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from source hosted on the project's own GitHub release, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

1# Maintainer: Hannes Körber <hannes@hkoerber.de>
2pkgname='grm'
3_pkgname_full='git-repo-manager'
4pkgver=0.12.0
5pkgrel=1
6pkgdesc='Manage git repos, worktrees and integrate with GitHub and GitLab'
7arch=('x86_64')
8url='https://github.com/hakoerber/git-repo-manager'
9license=('GPL-3.0-only')
10depends=('glibc' 'gcc-libs' 'libgit2' 'curl' 'openssl')
11makedepends=('cargo')
12source=("https://github.com/hakoerber/git-repo-manager/releases/download/v${pkgver}/source.tar.gz")
13sha256sums=('SKIP')
14 # https://gitlab.archlinux.org/archlinux/packaging/packages/pacman/-/issues/20
15options=(!lto !debug)
16
17prepare() {
18 cd "${_pkgname_full}-${pkgver}"
19 export RUSTUP_TOOLCHAIN=stable
20 cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
21}
22
23build() {
24 cd "${_pkgname_full}-${pkgver}"
25 export RUSTUP_TOOLCHAIN=stable
26 export CARGO_TARGET_DIR=target
27 export GRM_RELEASE_VERSION="${pkgver}"
28 cargo build --frozen --release
29}
30
31check() {
32 cd "${_pkgname_full}-${pkgver}"
33 export RUSTUP_TOOLCHAIN=stable
34 cargo test --frozen
35}
36
37package() {
38 cd "${_pkgname_full}-${pkgver}"
39 install -Dm0755 -t "$pkgdir/usr/bin/" "target/release/${pkgname}"
40}
41

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 13:16:10 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion