kendex-bin

LOW

maintainer vanillagreen 0 votes scanned 2026-08-20 05:10:41.769601

View on AUR

Why flagged

The package installs a prebuilt AppImage and binary from the project's official GitHub releases, which is normal for AUR packages; the low severity reflects the unverifiable prebuilt artifacts despite coming from a plausible project-owned source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage and binary from the project's official GitHub releases, which is normal for AUR packages; the low severity reflects the unverifiable prebuilt artifacts despite coming from a plausible project-owned source.

PKGBUILD

      1# Maintainer: VanillaGreen <ai1@vanillagreen.com>
    
      2pkgname=kendex-bin
    
      3pkgver=5.0.1
    
      4pkgrel=1
    
      5pkgdesc='Package manager for AI coding agents, skills, and hooks (desktop app and CLI)'
    
      6arch=('x86_64')
    
      7url='https://kendex.ai'
    
      8license=('MIT')
    
      9depends=('fuse2' 'hicolor-icon-theme')
    
      10provides=('kendex')
    
      11conflicts=('kendex' 'kendex-git')
    
      12options=('!strip')
    
      13source=(
    
      14  "kendex-app-$pkgver.AppImage::https://github.com/vanillagreencom/kendex/releases/download/v$pkgver/kendex_${pkgver}_amd64.AppImage"
    
      15  "kendex-$pkgver::https://github.com/vanillagreencom/kendex/releases/download/v$pkgver/kendex-x86_64-unknown-linux-gnu"
    
      16  "kendex.png::https://raw.githubusercontent.com/vanillagreencom/kendex/v$pkgver/crates/app/icons/128x128.png"
    
      17)
    
      18sha256sums=(
    
      19  '655180e2ba03b91746bb28c6f1ac49ce6684958fa5d6bd20bf4bc9d932973206'
    
      20  'a3dee4c286614016198db72603fcf95de277ddf1a245da052dc815821f0e84c0'
    
      21  '4ea797c32fc7754254505058574cdf080c90075a6e7995e30b27c6f939953e9d'
    
      22)
    
      23
    
      24package() {
    
      25  # The desktop app stays off PATH so the `kendex` command is the CLI.
    
      26  install -Dm755 "$srcdir/kendex-app-$pkgver.AppImage" "$pkgdir/usr/lib/kendex/kendex.AppImage"
    
      27  install -Dm755 "$srcdir/kendex-$pkgver" "$pkgdir/usr/bin/kendex"
    
      28  install -Dm644 "$srcdir/kendex.png" "$pkgdir/usr/share/icons/hicolor/128x128/apps/kendex.png"
    
      29  install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/kendex.desktop" <<'DESKTOP'
    
      30[Desktop Entry]
    
      31Type=Application
    
      32Name=kendex
    
      33Comment=Manage AI coding agents, skills, and hooks
    
      34Exec=/usr/lib/kendex/kendex.AppImage
    
      35Icon=kendex
    
      36Categories=Development;Utility;
    
      37Terminal=false
    
      38DESKTOP
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 05:10:41	Low	2