jankk-bin
The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to unverifiable origin of the binary, but it comes from a trusted project host with no evidence of malicious behavior.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to unverifiable origin of the binary, but it comes from a trusted project host with no evidence of malicious behavior.
PKGBUILD
# Maintainer: safalski <https://git.safallama.com.np/safalski>
pkgname=jankk-bin
_pkgname=jankk
pkgver=0.1.2
pkgrel=1
pkgdesc="A GBA game launcher and emulator frontend built with Qt and mGBA (prebuilt)"
arch=('x86_64')
url="https://github.com/Happilli/_jankk"
license=('GPL-3.0-only')
depends=('qt6-base' 'qt6-declarative' 'qt6-multimedia-ffmpeg' 'qt6-svg' 'qt6-shadertools' 'libmgba' 'lua')
provides=("$_pkgname")
conflicts=("$_pkgname")
source=("$_pkgname-$pkgver-x86_64.tar.gz::https://github.com/Happilli/_jankk/releases/download/v$pkgver/$_pkgname-$pkgver-x86_64.tar.gz")
sha256sums=('4abfe9db751d235a06db16cf18d11e5d3feb331f1cf02e9df18e27be5567a23c')
package() {
cp -a "$srcdir/usr" "$pkgdir/"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-02 10:02:25 | Low | 2 |