legacycycles-server-bin

LOW

maintainer Timfa 0 votes scanned 2026-10-26 15:45:54.756943

View on AUR

Why flagged

The package installs a prebuilt binary from the project's own Git hosting, which is a supply-chain risk if the host is compromised, but it is not actively malicious and the source is plausibly official.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own Git hosting, which is a supply-chain risk if the host is compromised, but it is not actively malicious and the source is plausibly official.

PKGBUILD

      1# Maintainer: Tim Falken <tim@timfalken.com>
    
      2# De CI (scripts/ci/publish-aur.sh) zet pkgver, _tag en sha256sums.
    
      3pkgname=legacycycles-server-bin
    
      4pkgver=0.0.32
    
      5pkgrel=1
    
      6_tag=v0.0.32
    
      7pkgdesc='Dedicated server for Legacy Cycles (prebuilt binary, systemd service)'
    
      8arch=('x86_64')
    
      9url='https://git.timfalken.com/timfa/legacy-cycles'
    
      10license=('MIT')
    
      11depends=('gcc-libs' 'glibc')
    
      12provides=('legacy-cycles-server' 'legacy-cycles-server-bin')
    
      13# Het bronpakket legacy-cycles levert /usr/bin/legacy-cycles-server ook.
    
      14# Tot v0.0.31 heette dit AUR-pakket legacy-cycles-server-bin (zie de client-PKGBUILD).
    
      15conflicts=('legacy-cycles-server' 'legacy-cycles' 'legacy-cycles-server-bin')
    
      16replaces=('legacy-cycles-server-bin')
    
      17backup=('etc/legacy-cycles-server/server.env')
    
      18install=legacy-cycles-server.install
    
      19options=('!strip' '!debug')
    
      20_local=('legacy-cycles-server.service' 'legacy-cycles-server.sysusers' 'legacy-cycles-server.tmpfiles' 'server.env')
    
      21source=("legacy-cycles-server-${_tag}-linux-x86_64.tar.gz::${url}/-/releases/${_tag}/assets/legacy-cycles-server-${_tag}-linux-x86_64.tar.gz"
    
      22        "${_local[@]}")
    
      23sha256sums=('9242efb8e90d26f61ad8c27ba7bbecb384ca76aaee408ecf3cc658bb720eaffe' '614fb8a166e834ef1e1f4645d8771055b0e47667d2be5d6d9d3363447b254baa' '7d5232180ae287d94d7a4dcc83528b8d7ff4fb7c84bd914cfa1cd79a963afe1e' '7f6f3490bf4145f05df4f9d5a32adc80cef97addfab62a71926d7401e138d450' '7dcb112a9742e69cb89f4daa459e56d73f32e0b344079ee1e3f7c23f9e594549')
    
      24
    
      25package() {
    
      26  install -Dm755 "$srcdir/legacy-cycles-server-${_tag}-linux-x86_64/legacy-cycles-server" "$pkgdir/usr/bin/legacy-cycles-server"
    
      27  install -Dm644 "$srcdir/legacy-cycles-server-${_tag}-linux-x86_64/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      28  install -Dm644 "$srcdir/legacy-cycles-server.service" "$pkgdir/usr/lib/systemd/system/legacy-cycles-server.service"
    
      29  install -Dm644 "$srcdir/legacy-cycles-server.sysusers" "$pkgdir/usr/lib/sysusers.d/legacy-cycles-server.conf"
    
      30  install -Dm644 "$srcdir/legacy-cycles-server.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/legacy-cycles-server.conf"
    
      31  install -Dm644 "$srcdir/server.env" "$pkgdir/etc/legacy-cycles-server/server.env"
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-26 15:45:54	Low	2