ivar-bin

LOW

maintainer mnzs 0 votes scanned 2026-08-19 03:41:13.749572

View on AUR

Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Gabriel Menezes <gabrielsmenezes99@gmail.com>
    
      2#
    
      3# Binary package: installs the prebuilt Linux binary that
    
      4# .github/workflows/release-binaries.yml attaches to the release. No Rust
    
      5# toolchain, no compile. The from-source counterpart is `ivar` (PKGBUILD).
    
      6#
    
      7# The asset names below are the same contract scripts/install.sh depends on —
    
      8# bare binaries named `ivar-linux-<arch>`, not archives named for the Rust
    
      9# target triple. Changing one without the other breaks both installers.
    
      10#
    
      11# This file is the source of truth; the AUR repo is a publish target.
    
      12# .github/workflows/release-aur.yml rewrites pkgver/pkgrel/sha256sums and
    
      13# pushes it. Do not hand-edit those fields in the AUR checkout.
    
      14
    
      15pkgname=ivar-bin
    
      16_pkgname=ivar
    
      17pkgver=0.2.0
    
      18pkgrel=1
    
      19pkgdesc="Mount the repos a feature spans into one directory, on one branch, for one agent session (prebuilt binary)"
    
      20arch=('x86_64' 'aarch64')
    
      21url="https://github.com/mnzsss/ivar"
    
      22license=('Apache-2.0')
    
      23# git is a runtime dependency: ivar reads through libgit2 but every mutation
    
      24# shells out to the git binary (docs/adr/0001 §3).
    
      25depends=('gcc-libs' 'glibc' 'git')
    
      26optdepends=(
    
      27    'github-cli: authentication and pull requests without exporting a token'
    
      28)
    
      29provides=("$_pkgname=$pkgver")
    
      30conflicts=("$_pkgname")
    
      31# !strip: [profile.release] sets strip = true, so the asset arrives stripped —
    
      32#   and on aarch64 built elsewhere there is nothing local that could strip it.
    
      33# !debug: same reason, there are no symbols for a -debug package.
    
      34options=('!strip' '!debug')
    
      35
    
      36# Arch-independent: the licence texts, which the binary asset does not carry.
    
      37source=(
    
      38    "$_pkgname-$pkgver-LICENSE::https://raw.githubusercontent.com/mnzsss/$_pkgname/v$pkgver/LICENSE"
    
      39    "$_pkgname-$pkgver-NOTICE::https://raw.githubusercontent.com/mnzsss/$_pkgname/v$pkgver/NOTICE"
    
      40)
    
      41sha256sums=('cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30' 'abadb6d32863e1a592f046c14e4518e65f820088586018cba581341a6b4f5394')
    
      42
    
      43source_x86_64=("$_pkgname-$pkgver-x86_64::$url/releases/download/v$pkgver/$_pkgname-linux-x86_64")
    
      44sha256sums_x86_64=('ce3ab18077b42364991267923a44804e5bbb7436b4b0fcbb3809d3b881a80cb7')
    
      45source_aarch64=("$_pkgname-$pkgver-aarch64::$url/releases/download/v$pkgver/$_pkgname-linux-aarch64")
    
      46sha256sums_aarch64=('c6f2e782bbeb460cffa0b7cfee4a3ec56bc42fa9f4dd9f68b9e4b65ea465f5a6')
    
      47
    
      48package() {
    
      49    install -Dm0755 "$srcdir/$_pkgname-$pkgver-$CARCH" "$pkgdir/usr/bin/$_pkgname"
    
      50    install -Dm0644 "$srcdir/$_pkgname-$pkgver-LICENSE" "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
    
      51    install -Dm0644 "$srcdir/$_pkgname-$pkgver-NOTICE" "$pkgdir/usr/share/licenses/$_pkgname/NOTICE"
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-19 03:41:13	Low	1