koral-bin
The package downloads a prebuilt binary from a GitHub release, which is a normal AUR practice; the source is from the project's own repository, and while the host is not whitelisted, it is plausibly legitimate, with no evidence of malicious behavior or code execution beyond standard installation.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a GitHub release, which is a normal AUR practice; the source is from the project's own repository, and while the host is not whitelisted, it is plausibly legitimate, with no evidence of malicious behavior or code execution beyond standard installation.
PKGBUILD
# Maintainer: mafuzyk <mafuzyk@gmail.com>
pkgname=koral-bin
pkgver=0.1.0
pkgrel=1
pkgdesc="A Rust terminal with native sharky shell support"
arch=('x86_64')
url="https://github.com/mafuzyk/koral"
license=('GPL-3.0-only')
depends=('gcc-libs' 'glibc' 'hicolor-icon-theme' 'libxkbcommon' 'ttf-iosevkaterm-nerd' 'vulkan-icd-loader' 'wayland')
optdepends=('sharky-shell-git: folds, prompt jumps and command status')
provides=('koral')
conflicts=('koral')
options=('!debug')
source=("koral-$pkgver.tar.gz::$url/releases/download/v$pkgver/koral-x86_64-linux.tar.gz")
sha256sums=('2b0414c3cb31b860bb5ca21405afaeccd57ced75b76a5bb3d7f9fe18e6b89b2f')
package() {
install -Dm755 koral "$pkgdir/usr/bin/koral"
install -Dm644 koral.desktop "$pkgdir/usr/share/applications/koral.desktop"
install -Dm644 koral.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/koral.svg"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 01:59:19 | Low | 2 |