hifox-cli

LOW

maintainer duanluan 0 votes scanned 2026-10-19 05:23:55.891510

View on AUR

Why flagged

The package downloads and installs a prebuilt binary from the project's own domain; while the host is not on common whitelists, it is plausibly official, and the checksums are provided and valid, reducing risk to low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads and installs a prebuilt binary from the project's own domain; while the host is not on common whitelists, it is plausibly official, and the checksums are provided and valid, reducing risk to low.

PKGBUILD

      1# Maintainer: duanluan <duanluan@outlook.com>
    
      2
    
      3pkgname=hifox-cli
    
      4pkgver=0.4.432
    
      5pkgrel=1
    
      6pkgdesc='HiFox CLI: terminal client for the HiFox human and AI agent collaboration platform'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://hifox.com/'
    
      9license=('LicenseRef-Proprietary')
    
      10provides=("hifox-cli-bin=${pkgver}" "hifox=${pkgver}")
    
      11conflicts=('hifox-cli-bin' 'hifox')
    
      12options=('!strip')
    
      13_base_url="https://file-assets.hifox.com/download"
    
      14source_x86_64=("hifox-cli_linux_amd64-${pkgver}.tar.gz::${_base_url}/${pkgver}/linux/HiFox-cli_linux_amd64.tar.gz")
    
      15source_aarch64=("hifox-cli_linux_arm64-${pkgver}.tar.gz::${_base_url}/${pkgver}/linux/HiFox-cli_linux_arm64.tar.gz")
    
      16sha256sums_x86_64=('9e802f6005aedff8e368a1f66ed8375caaecc6562c2308d4404d0bf242c19c88')
    
      17sha256sums_aarch64=('fb19169267112e4e3f12e35e9f9869e10fcac7279902a1bccee97f8d22f73f91')
    
      18
    
      19package() {
    
      20  install -Dm755 "${srcdir}/hifox" "${pkgdir}/usr/bin/hifox"
    
      21
    
      22  # Completions are generated by running the prebuilt binary; skip them when
    
      23  # it cannot execute on the build host (for example a cross-architecture build).
    
      24  if "${srcdir}/hifox" version >/dev/null 2>&1; then
    
      25    install -Dm644 <("${srcdir}/hifox" completion bash) \
    
      26      "${pkgdir}/usr/share/bash-completion/completions/hifox"
    
      27    install -Dm644 <("${srcdir}/hifox" completion zsh) \
    
      28      "${pkgdir}/usr/share/zsh/site-functions/_hifox"
    
      29    install -Dm644 <("${srcdir}/hifox" completion fish) \
    
      30      "${pkgdir}/usr/share/fish/vendor_completions.d/hifox.fish"
    
      31  else
    
      32    printf 'skipping shell completions: the prebuilt binary does not run on this host\n' >&2
    
      33  fi
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 05:23:55	Low	2