himorime-bin

LOW

maintainer Dominiquini 1 votes scanned 2026-09-20 07:32:26.301293

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases, which is a common AUR practice; the source is verifiable and checksums are provided and checked, but the low vote count and recent upload warrant caution typical for new packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a common AUR practice; the source is verifiable and checksums are provided and checked, but the low vote count and recent upload warrant caution typical for new packages.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=nao1215
    
      4_gitname=himorime
    
      5_appname=${_gitname}
    
      6pkgname=${_gitname}-bin
    
      7pkgdesc="Performance budgets and regression checks for CLIs from plain YAML"
    
      8
    
      9pkgver=0.4.0
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64' 'aarch64')
    
      14_barch=('linux_amd64' 'linux_arm64')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('MIT')
    
      21
    
      22provides=("${_appname}")
    
      23conflicts=("${pkgname%-bin}")
    
      24
    
      25options=('!strip')
    
      26
    
      27_pkgsrc="${_gitname}-${pkgver}"
    
      28
    
      29source=("${_pkgsrc}-checksums.txt::${url}/releases/download/${_gitversion}/checksums.txt")
    
      30source_x86_64=("${_pkgsrc}-${arch[0]}.tgz::${url}/releases/download/${_gitversion}/${_pkgsrc//-/_}_${_barch[0]}.tar.gz")
    
      31source_aarch64=("${_pkgsrc}-${arch[1]}.tgz::${url}/releases/download/${_gitversion}/${_pkgsrc//-/_}_${_barch[1]}.tar.gz")
    
      32sha256sums=('8aeec652dd6921f97b92e4c40c847ac50097be3886d85eef33530abd20de3234')
    
      33sha256sums_x86_64=('45d58df979ed69552b8368b4a50fd70c84a41ac05f28048ffdaf0f14041cb8b1')
    
      34sha256sums_aarch64=('f486cb437d3f61ccb216370a5f38f518c46134f40d0f6c22530530ee5d2098d4')
    
      35
    
      36
    
      37verify() {
    
      38	cp "${_pkgsrc}-checksums.txt" "checksums.txt"
    
      39	sed -n \
    
      40		-e "/${_pkgsrc//-/_}_${_barch[0]}.tar.gz/{s//${_pkgsrc}-${arch[0]}.tgz/g;p;}" \
    
      41		-e "/${_pkgsrc//-/_}_${_barch[1]}.tar.gz/{s//${_pkgsrc}-${arch[1]}.tgz/g;p;}" \
    
      42		-i "checksums.txt"
    
      43
    
      44	sha256sum -c --ignore-missing "checksums.txt"
    
      45}
    
      46
    
      47build() {
    
      48	cd "${srcdir}/" || exit
    
      49
    
      50	mkdir -p "./completions"
    
      51
    
      52	"./${_appname}" completion zsh > "./completions/${_appname}.zsh"
    
      53	"./${_appname}" completion bash > "./completions/${_appname}.bash"
    
      54}
    
      55
    
      56package() {
    
      57	cd "${srcdir}/" || exit
    
      58
    
      59	install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
    
      60
    
      61	install -Dm644 "./completions/${_appname}.zsh" "${pkgdir}/usr/share/zsh/site-functions/_${_appname}"
    
      62	install -Dm644 "./completions/${_appname}.bash" "${pkgdir}/usr/share/bash-completion/completions/${_appname}"
    
      63
    
      64	install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      65
    
      66	install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      67}
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-20 07:32:26	Low	2