lich-bin

maintainer omartelo · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package downloads a prebuilt binary from a GitHub release and static assets from GitHub content; while the host is not whitelisted, it is the project's own official repository, and the binary is the core of the project being installed, which is normal for AUR packages.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads a prebuilt binary from a GitHub release and static assets from GitHub content; while the host is not whitelisted, it is the project's own official repository, and the binary is the core of the project being installed, which is normal for AUR packages.

PKGBUILD

      1# Maintainer: omartelo <meopedevts@proton.me>
    
      2# Rendered by .github/workflows/release.yml (0.23.0 -> tag, checksums via
    
      3# updpkgsums) and pushed to the AUR — edit this template, never the AUR copy.
    
      4pkgname=lich-bin
    
      5pkgver=0.23.0
    
      6pkgrel=1
    
      7pkgdesc="A personal harness for AI-assisted development"
    
      8arch=('x86_64')
    
      9url="https://github.com/omartelo/lich"
    
      10license=('AGPL-3.0-only')
    
      11provides=('lich')
    
      12conflicts=('lich')
    
      13optdepends=('chromium: app window (any Chromium-family browser works: chromium, google-chrome, brave)'
    
      14            'zenity: native folder picker')
    
      15source=("lich-v${pkgver}-linux-amd64::${url}/releases/download/v${pkgver}/lich-v${pkgver}-linux-amd64"
    
      16        "lich-${pkgver}.desktop::https://raw.githubusercontent.com/omartelo/lich/v${pkgver}/build/linux/lich.desktop"
    
      17        "lich-${pkgver}.png::https://raw.githubusercontent.com/omartelo/lich/v${pkgver}/build/appicon.png")
    
      18sha256sums=('bbc0f525af30d22294a26109d3bd12ea622c0d52672d0656e00e2c8683853e1b'
    
      19            'b5f6635d59ef2b178cdf5788798fa4bac6b66505830c3b1b1f93bf8fe90dca8e'
    
      20            '1575213b7d0ac3b3c832da61c856f29a839a2a0242abd34d3ab3ea9ae8c8a306')
    
      21
    
      22package() {
    
      23  install -Dm755 "lich-v${pkgver}-linux-amd64" "${pkgdir}/usr/bin/lich"
    
      24  install -Dm644 "lich-${pkgver}.desktop" "${pkgdir}/usr/share/applications/lich.desktop"
    
      25  install -Dm644 "lich-${pkgver}.png" "${pkgdir}/usr/share/icons/hicolor/128x128/apps/lich.png"
    
      26}
    
      27

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,8 +1,8 @@
 # Maintainer: omartelo <meopedevts@proton.me>
-# Rendered by .github/workflows/release.yml (0.22.0 -> tag, checksums via
+# Rendered by .github/workflows/release.yml (0.23.0 -> tag, checksums via
 # updpkgsums) and pushed to the AUR — edit this template, never the AUR copy.
 pkgname=lich-bin
-pkgver=0.22.0
+pkgver=0.23.0
 pkgrel=1
 pkgdesc="A personal harness for AI-assisted development"
 arch=('x86_64')
@@ -15,9 +15,9 @@
 source=("lich-v${pkgver}-linux-amd64::${url}/releases/download/v${pkgver}/lich-v${pkgver}-linux-amd64"
         "lich-${pkgver}.desktop::https://raw.githubusercontent.com/omartelo/lich/v${pkgver}/build/linux/lich.desktop"
         "lich-${pkgver}.png::https://raw.githubusercontent.com/omartelo/lich/v${pkgver}/build/appicon.png")
-sha256sums=('4a92e7cd5bb072d84c3f096ad8829627657a78a6cc1bd75a208a8cb3cb69bcf1'
+sha256sums=('bbc0f525af30d22294a26109d3bd12ea622c0d52672d0656e00e2c8683853e1b'
             'b5f6635d59ef2b178cdf5788798fa4bac6b66505830c3b1b1f93bf8fe90dca8e'
-            'd61ff3a75bfa9845b330a6d2ddeddb2450a2795d9e64338b2f05261e5eedc2c3')
+            '1575213b7d0ac3b3c832da61c856f29a839a2a0242abd34d3ab3ea9ae8c8a306')
 
 package() {
   install -Dm755 "lich-v${pkgver}-linux-amd64" "${pkgdir}/usr/bin/lich"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 01:17:03	LOW	2
2026-07-29 00:25:53	CLEAN	2
2026-07-28 15:39:03	LOW	1
2026-07-28 00:07:28	CLEAN	2
2026-07-27 23:36:42	LOW	1
2026-07-27 19:35:21	LOW	1
2026-07-27 00:24:32	CLEAN	2
2026-07-26 21:33:42	LOW	1
2026-07-26 01:31:24	LOW	1
2026-07-26 00:07:32	CLEAN	2
2026-07-25 15:29:50	LOW	1
2026-07-25 00:13:44	LOW	2
2026-07-24 05:27:22	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 21:26:05	LOW	2
2026-07-23 19:25:44	LOW	1
2026-07-23 17:25:21	LOW	1