icon-theme-toolkit (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): Package builds from source hosted on the project's own GitHub repository, installs a legitimate toolkit, and has no malicious or unverifiable components; low vote count and recent upload are not indicators of inherent risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Ваше Имя <you@example.com>
    
      2pkgname=icon-theme-toolkit
    
      3pkgver=1.0.1
    
      4pkgrel=1
    
      5pkgdesc="Toolkit for creating and editing Linux icon themes"
    
      6arch=('any')
    
      7url="https://github.com/nestoris/icon-theme-toolkit"
    
      8license=('GPLv3')
    
      9depends=('gjs' 'gtk3' 'gdk-pixbuf2')
    
      10optdepends=('icoutils: support of importing/exporting ICO')
    
      11makedepends=()
    
      12source=("$pkgname-$pkgver.tar.gz::$url/archive/$pkgver.tar.gz")
    
      13sha256sums=('d41735e12a5f1ddcf12a4f7957d4b176c3982e6de5f2e15e6f9b0ba801cb48c0')
    
      14
    
      15package() {
    
      16    cd "$srcdir/$pkgname-$pkgver"
    
      17    make install DESTDIR="$pkgdir"
    
      18}
    
      19

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 00:07:41	Clean	2
2026-10-30 21:57:10	Low	1