k8-bin

LOW
maintainer imjiaoyuan 0 votes scanned 2026-10-08 16:09:18.783063
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for software that is difficult to build from source; the binary is from a trusted project host and the checksum is verified, so the risk is low despite the binary nature and limited votes.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for software that is difficult to build from source; the binary is from a trusted project host and the checksum is verified, so the risk is low despite the binary nature and limited votes.

PKGBUILD

1# Maintainer: imjiaoyuan <imjiaoyuan@gmail.com>
2# k8 can only be built from source against a fully compiled node.js tree, so
3# upstream's own precompiled Linux release is packaged instead.
4
5pkgname=k8-bin
6pkgver=1.2
7pkgrel=1
8pkgdesc="Javascript shell based on V8"
9arch=('x86_64')
10url="https://github.com/attractivechaos/k8"
11license=('MIT')
12depends=('glibc')
13provides=('k8')
14conflicts=('k8')
15source=("k8-$pkgver.tar.bz2::$url/releases/download/v$pkgver/k8-$pkgver.tar.bz2")
16sha256sums=('a86b160a82f3233a21235d21170f3719a600dbd96bf1ec705a6eb57d770953c9')
17
18package() {
19 cd "$srcdir/k8-$pkgver"
20 install -Dm755 k8-x86_64-Linux "$pkgdir/usr/bin/k8"
21 install -Dm644 LICENSE.txt "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
22}
23

Scan history

Scanned at (UTC)SeverityRules
2026-10-08 16:09:18 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion