kocr-bin

LOW
maintainer Kercy 0 votes scanned 2026-11-01 10:00:05.946014
View on AUR
Why flagged

The package installs a prebuilt binary from the project's official GitHub release page, which is a normal distribution method; the low severity is due to limited AUR votes and recent upload, not malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release page, which is a normal distribution method; the low severity is due to limited AUR votes and recent upload, not malicious behavior.

PKGBUILD

1pkgname=kocr-bin
2pkgver=0.4.0
3pkgrel=1
4pkgdesc='Offline OCR command-line tool (prebuilt binary)'
5arch=('x86_64')
6url='https://github.com/KercyDing/kocr'
7license=('Apache-2.0')
8depends=('glibc' 'gcc-libs')
9provides=('kocr')
10conflicts=('kocr')
11source=("kocr-cli-0.4.0-linux-amd64.deb::https://github.com/KercyDing/kocr/releases/download/v0.4.0/kocr-cli-0.4.0-linux-amd64.deb")
12sha256sums=('b960a547f8b328d3217d73f997f1b82c85b176fd2fbd5d5cfb46bda749346038')
13
14package() {
15 cd "${srcdir}"
16 bsdtar -xf "kocr-cli-0.4.0-linux-amd64.deb"
17 local data_tar
18 data_tar=$(find . -maxdepth 1 -type f -name 'data.tar.*' | head -n 1)
19 bsdtar -xf "${data_tar}"
20
21 install -Dm644 "usr/share/doc/kocr/LICENSE" "${pkgdir}/usr/share/licenses/kocr-bin/LICENSE"
22 install -Dm644 "usr/share/doc/kocr/NOTICE" "${pkgdir}/usr/share/licenses/kocr-bin/NOTICE"
23 install -Dm644 "usr/share/doc/kocr/LICENSE-PaddleOCR" "${pkgdir}/usr/share/licenses/kocr-bin/LICENSE-PaddleOCR"
24 install -Dm644 "usr/share/doc/kocr/LICENSE-SourceHanSans" "${pkgdir}/usr/share/licenses/kocr-bin/LICENSE-SourceHanSans"
25 install -Dm755 usr/bin/kocr "${pkgdir}/usr/bin/kocr"
26}
27

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 10:00:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion