kokon-bin

LOW

maintainer ufo_driver 0 votes scanned 2026-10-21 21:33:09.570113

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release, which is a normal distribution method for many AUR packages; the low severity is due to the recent upload and few votes, not malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a GitHub release, which is a normal distribution method for many AUR packages; the low severity is due to the recent upload and few votes, not malicious behavior.

PKGBUILD

      1# shellcheck shell=bash disable=SC2034,SC2154
    
      2# Maintainer: Ivan Wheeler <ivanwheeler90 at gmail dot com>
    
      3
    
      4pkgname=kokon-bin
    
      5pkgver=0.10.0
    
      6pkgrel=1
    
      7pkgdesc='Kokon creates and edits images from a sentence, privately on your own GPU, with Qwen-Image 2.1 via stable-diffusion.cpp. Everything runs on this PC.'
    
      8arch=('x86_64')
    
      9url="https://kokon.app"
    
      10license=('AGPL-3.0-only')
    
      11provides=('kokon')
    
      12conflicts=('kokon')
    
      13options=(!strip) # breaks kokon-mcp otherwise
    
      14depends=(openssl libgomp vulkan-icd-loader webkit2gtk-4.1 gtk3)
    
      15optdepends=('cuda: Runtime for NVIDIA GPUs')
    
      16
    
      17noextract=("Kokon_${pkgver}_amd64.deb")
    
      18source=("https://github.com/GabrieleLozupone/kokon/releases/download/v${pkgver}/${noextract[0]}")
    
      19b2sums=('5bd6eede76ecbaa5f5d433b64ef5117c53e09253f98c185a17671cb8457b148faa39af9cc927aff19fd0698b1315b41079dcdf155fdfb67474163e30f9ea4219')
    
      20
    
      21package() {
    
      22  # Really nothing else to do here
    
      23  bsdtar -xOf "${noextract[0]}" 'data.tar.gz' | bsdtar -xf - -C "$pkgdir/"
    
      24}
    
      25

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-21 21:33:09	Low	2