keepkit-bin

maintainer Dominiquini · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from GitHub releases, which is a normal practice for AUR packages; the source is verifiable via checksums and hosted on an official project domain, but the low vote count and recent upload introduce minor trust concerns.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a normal practice for AUR packages; the source is verifiable via checksums and hosted on an official project domain, but the low vote count and recent upload introduce minor trust concerns.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=stanlyzoolo
    
      4_gitname=keepkit
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="Lightweight TUI for tracking versions of your favorite tools"
    
      8
    
      9pkgver=0.2.0
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64' 'aarch64')
    
      14_barch=('linux_x86_64' 'linux_arm64')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('MIT')
    
      21
    
      22provides=("${_appname}")
    
      23conflicts=("${_appname}")
    
      24
    
      25options=(!strip)
    
      26
    
      27source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}_${_gitversion}_${_barch[0]}.tar.gz")
    
      28source_aarch64=("${_appname}-${arch[1]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}_${_gitversion}_${_barch[1]}.tar.gz")
    
      29sha256sums_x86_64=('08f62bab74caf05625532d4e1e596f587c555d5351353dbca5e3edd66d83c557')
    
      30sha256sums_aarch64=('1e238709c16de506de5960d04edaa67cc4c078f5b9295981aa728798ee979240')
    
      31
    
      32
    
      33package() {
    
      34	cd "${srcdir}/" || exit
    
      35
    
      36	install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
    
      37
    
      38	install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      39
    
      40	install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      41}
    
      42

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-08-03 00:08
@@ -6,7 +6,7 @@
 pkgname=${_appname}-bin
 pkgdesc="Lightweight TUI for tracking versions of your favorite tools"
 
-pkgver=0.1.0
+pkgver=0.2.0
 pkgrel=1
 _gitversion=v${pkgver}
 
@@ -26,8 +26,8 @@
 
 source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}_${_gitversion}_${_barch[0]}.tar.gz")
 source_aarch64=("${_appname}-${arch[1]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}_${_gitversion}_${_barch[1]}.tar.gz")
-sha256sums_x86_64=('4b305280b1055b3dcf319284ae147e3502d6e57153e03bb5587d89c03d4d320f')
-sha256sums_aarch64=('0e752bc81d24172a102371bbaed7f14caaeb6a053dae54066f6953fd5ae5b306')
+sha256sums_x86_64=('08f62bab74caf05625532d4e1e596f587c555d5351353dbca5e3edd66d83c557')
+sha256sums_aarch64=('1e238709c16de506de5960d04edaa67cc4c078f5b9295981aa728798ee979240')
 
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 23:17:02	LOW	2
2026-07-29 00:25:53	CLEAN	2
2026-07-28 05:37:03	LOW	1