kiekje-bin
The package downloads prebuilt release binaries from the project's own GitHub repository, which is a normal AUR practice; the binary is not executed at build time, and the checksums are provided, reducing risk despite the low-trust flag.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt release binaries from the project's own GitHub repository, which is a normal AUR practice; the binary is not executed at build time, and the checksums are provided, reducing risk despite the low-trust flag.
PKGBUILD
# Maintainer: Remco Stoeten
pkgname=kiekje-bin
pkgver=0.1.0alpha6
pkgrel=1
_tag=0.1.0-alpha.6
pkgdesc='Capture, mark up and keep screenshots (release binary)'
arch=('x86_64' 'aarch64')
url='https://github.com/remcostoeten/kiekje'
license=('MIT' 'OFL-1.1')
depends=('gtk4' 'wayland' 'glib2' 'cairo' 'pango' 'fontconfig' 'gdk-pixbuf2' 'graphene' 'gcc-libs' 'glibc')
optdepends=(
'xdg-desktop-portal: capture and global shortcuts through the portal'
'gst-plugins-base: capture sound'
'gst-plugins-good: capture sound through PulseAudio, and screen recording'
'gst-plugin-pipewire: screen recording'
)
provides=('kiekje')
conflicts=('kiekje')
options=('!strip' '!debug')
source_x86_64=("kiekje-$_tag-x86_64-linux.tar.gz::$url/releases/download/v$_tag/kiekje-$_tag-x86_64-linux.tar.gz")
source_aarch64=("kiekje-$_tag-aarch64-linux.tar.gz::$url/releases/download/v$_tag/kiekje-$_tag-aarch64-linux.tar.gz")
sha256sums_x86_64=('47e929b31e05a0d22602bdb2a2f44614caf16a110ba294116abefc1afc4dd908')
sha256sums_aarch64=('ce63723090b3a35c13bda3590d40f5bb726fef51ceedf1684ad1803fa97faa10')
package() {
cd "kiekje-$_tag-$CARCH-linux"
DESTDIR="$pkgdir" PREFIX=/usr packaging/install.sh ./kiekje
}
Changes since previous scan
--- PKGBUILD @ 2026-10-16 00:12+++ PKGBUILD @ 2026-10-17 00:21@@ -1,8 +1,8 @@ # Maintainer: Remco Stoeten pkgname=kiekje-bin-pkgver=0.1.0alpha4+pkgver=0.1.0alpha6 pkgrel=1-_tag=0.1.0-alpha.4+_tag=0.1.0-alpha.6 pkgdesc='Capture, mark up and keep screenshots (release binary)' arch=('x86_64' 'aarch64') url='https://github.com/remcostoeten/kiekje'@@ -10,14 +10,17 @@ depends=('gtk4' 'wayland' 'glib2' 'cairo' 'pango' 'fontconfig' 'gdk-pixbuf2' 'graphene' 'gcc-libs' 'glibc') optdepends=( 'xdg-desktop-portal: capture and global shortcuts through the portal'+ 'gst-plugins-base: capture sound'+ 'gst-plugins-good: capture sound through PulseAudio, and screen recording'+ 'gst-plugin-pipewire: screen recording' ) provides=('kiekje') conflicts=('kiekje') options=('!strip' '!debug') source_x86_64=("kiekje-$_tag-x86_64-linux.tar.gz::$url/releases/download/v$_tag/kiekje-$_tag-x86_64-linux.tar.gz") source_aarch64=("kiekje-$_tag-aarch64-linux.tar.gz::$url/releases/download/v$_tag/kiekje-$_tag-aarch64-linux.tar.gz")-sha256sums_x86_64=('4cff4251cb41c130613a92c14c9a0e3f7abf6f5d2fe6281264b03f4c02d2cd55')-sha256sums_aarch64=('2af247fa698ea620759ea151cd7523d9a36f442163564a67445060c18b6c42c3')+sha256sums_x86_64=('47e929b31e05a0d22602bdb2a2f44614caf16a110ba294116abefc1afc4dd908')+sha256sums_aarch64=('ce63723090b3a35c13bda3590d40f5bb726fef51ceedf1684ad1803fa97faa10') package() { cd "kiekje-$_tag-$CARCH-linux"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 11:16:06 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 23:11:19 | Low | 2 |
| 2026-10-11 21:11:00 | Low | 2 |