kotki-models-tiny

LOW

maintainer Giovani_Geek 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads model data from the project's official GitHub releases, which is normal for AUR packages; the models are non-executable assets installed as data, so even if the source were compromised, the worst case is data tampering, not code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads model data from the project's official GitHub releases, which is normal for AUR packages; the models are non-executable assets installed as data, so even if the source were compromised, the worst case is data tampering, not code execution.

PKGBUILD

      1# shellcheck disable=SC2034,SC2154,SC2164
    
      2# Maintainer: Energetix/Dark Nebula <https://github.com/Jobanny-Friki>
    
      3
    
      4pkgbase=kotki-models-tiny
    
      5pkgname=(
    
      6    'localtranslate-models-kotki-tiny'
    
      7    'kotki-models-tiny'
    
      8)
    
      9pkgver=0.6.0
    
      10_models_ver=0.3.3
    
      11pkgrel=3
    
      12arch=("any")
    
      13url="https://github.com/kroketio/kotki"
    
      14license=('MPL-2.0')
    
      15source=(
    
      16    "$url/releases/download/$pkgver/kotki_models_${_models_ver}-tiny.zip"
    
      17)
    
      18sha256sums=('5a19cef79a2317767a28decca47c51c8d035e8a35cad976798c1bc2b32205bd4')
    
      19
    
      20# --- LocalTranslate ---
    
      21
    
      22package_localtranslate-models-kotki-tiny() {
    
      23    pkgdesc="Kotki's tiny translation models adapted for LocalTranslate"
    
      24    provides=("localtranslate-models-base")
    
      25    conflicts=("localtranslate-models-base")
    
      26
    
      27    install -dm755 "${pkgdir}/usr/share/localtranslate/models/firefox"
    
      28    cp -a --reflink=auto "${srcdir}/${_models_ver}-tiny/." "${pkgdir}/usr/share/localtranslate/models/firefox/"
    
      29}
    
      30
    
      31# --- Kotki ---
    
      32
    
      33package_kotki-models-tiny() {
    
      34    pkgdesc="Kotki's tiny translation models for native Kotki application"
    
      35    provides=("kotki-models-base")
    
      36    conflicts=("kotki-models-base")
    
      37
    
      38    install -dm755 "${pkgdir}/usr/share/kotki/models"
    
      39    cp -a --reflink=auto "${srcdir}/${_models_ver}-tiny/." "${pkgdir}/usr/share/kotki/models/"
    
      40}

Changes since previous scan

--- PKGBUILD @ 2026-10-13 03:15
+++ PKGBUILD @ 2026-10-17 00:21
@@ -8,7 +8,7 @@
 )
 pkgver=0.6.0
 _models_ver=0.3.3
-pkgrel=2
+pkgrel=3
 arch=("any")
 url="https://github.com/kroketio/kotki"
 license=('MPL-2.0')
@@ -35,6 +35,6 @@
     provides=("kotki-models-base")
     conflicts=("kotki-models-base")
 
-    install -dm755 "${pkgdir}/usr/share/kotki"
-    cp -a --reflink=auto "${srcdir}/${_models_ver}-tiny/." "${pkgdir}/usr/share/kotki/"
+    install -dm755 "${pkgdir}/usr/share/kotki/models"
+    cp -a --reflink=auto "${srcdir}/${_models_ver}-tiny/." "${pkgdir}/usr/share/kotki/models/"
 }

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 05:15:42	Low	2
2026-10-13 03:15:27	Low	1
2026-10-13 00:23:45	Clean	2
2026-10-12 21:14:41	Low	1