koral-bin

LOW
maintainer Mafuzyk 0 votes scanned 2026-11-01 01:59:19.609877
View on AUR
Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a normal AUR practice; the source is from the project's own repository, and while the host is not whitelisted, it is plausibly legitimate, with no evidence of malicious behavior or code execution beyond standard installation.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a GitHub release, which is a normal AUR practice; the source is from the project's own repository, and while the host is not whitelisted, it is plausibly legitimate, with no evidence of malicious behavior or code execution beyond standard installation.

PKGBUILD

1# Maintainer: mafuzyk <mafuzyk@gmail.com>
2
3pkgname=koral-bin
4pkgver=0.1.0
5pkgrel=1
6pkgdesc="A Rust terminal with native sharky shell support"
7arch=('x86_64')
8url="https://github.com/mafuzyk/koral"
9license=('GPL-3.0-only')
10depends=('gcc-libs' 'glibc' 'hicolor-icon-theme' 'libxkbcommon' 'ttf-iosevkaterm-nerd' 'vulkan-icd-loader' 'wayland')
11optdepends=('sharky-shell-git: folds, prompt jumps and command status')
12provides=('koral')
13conflicts=('koral')
14options=('!debug')
15source=("koral-$pkgver.tar.gz::$url/releases/download/v$pkgver/koral-x86_64-linux.tar.gz")
16sha256sums=('2b0414c3cb31b860bb5ca21405afaeccd57ced75b76a5bb3d7f9fe18e6b89b2f')
17
18package() {
19 install -Dm755 koral "$pkgdir/usr/bin/koral"
20 install -Dm644 koral.desktop "$pkgdir/usr/share/applications/koral.desktop"
21 install -Dm644 koral.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/koral.svg"
22 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
23}
24

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 01:59:19 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion