iqtree-bin

maintainer imjiaoyuan · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package installs a precompiled binary from the project's official GitHub releases, which is a normal practice for statically-linked software; the low severity is due to the binary being unverifiable but from a trusted project source.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a precompiled binary from the project's official GitHub releases, which is a normal practice for statically-linked software; the low severity is due to the binary being unverifiable but from a trusted project source.

PKGBUILD

1# Maintainer: imjiaoyuan <imjiaoyuan@gmail.com>
2
3pkgname=iqtree-bin
4pkgver=3.1.3
5pkgrel=1
6pkgdesc="Efficient phylogenomic software by maximum likelihood (precompiled binary) https://doi.org/10.1093/molbev/msaa015"
7_pkgname=iqtree3
8arch=('x86_64')
9url="https://github.com/iqtree/${_pkgname}"
10license=('GPL-2.0-or-later')
11depends=()
12provides=("iqtree=${pkgver}")
13conflicts=('iqtree')
14options=('!strip' '!debug')
15source=("${pkgname}-${pkgver}-Linux-intel.tar.gz::${url}/releases/download/v${pkgver}/iqtree-${pkgver}-Linux-intel.tar.gz")
16sha256sums=('ac87dee78d06b67a1be87fff4a325358d038b5ae947308e52b3cf23829521aa8')
17
18# Upstream ships a statically-linked binary (ldd: not a dynamic executable),
19# so there are no runtime shared-library deps and no build step.
20
21package() {
22 cd "$srcdir"
23 install -Dm755 "iqtree-${pkgver}-Linux-intel/bin/${_pkgname}" "$pkgdir/usr/bin/${_pkgname}"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 15:36:47 LOW 2
2026-08-17 00:18:29 LOW 2
2026-08-16 00:03:42 LOW 2
2026-08-15 15:30:38 LOW 2
2026-08-15 00:26:13 LOW 2
2026-08-14 00:03:41 LOW 2
2026-08-13 00:17:07 LOW 2
2026-08-12 01:22:13 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion