llama.cpp-rocm-bin

LOW

maintainer monsoon235 0 votes scanned 2026-10-06 08:02:16.298752

View on AUR

Why flagged

The package installs prebuilt binaries from the official project's GitHub releases, which is a normal practice; the source is verifiable and checksummed, posing minimal risk despite being recently uploaded with few votes.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the official project's GitHub releases, which is a normal practice; the source is verifiable and checksummed, posing minimal risk despite being recently uploaded with few votes.

PKGBUILD

      1# Maintainer: monsoon <29970829+monsoon235@users.noreply.github.com>
    
      2pkgname=llama.cpp-rocm-bin
    
      3pkgver=b11433
    
      4pkgrel=1
    
      5pkgdesc='llama.cpp upstream prebuilt binaries with the ROCm backend'
    
      6arch=('x86_64')
    
      7url='https://github.com/ggml-org/llama.cpp'
    
      8license=('MIT')
    
      9# Initial dependency candidates. Confirm with scripts/docker-check.sh before publishing.
    
      10depends=('glibc' 'gcc-libs' 'openssl' 'hip-runtime-amd' 'hipblas' 'rocblas')
    
      11provides=('llama.cpp')
    
      12conflicts=('llama.cpp')
    
      13options=('!strip' '!debug')
    
      14_rocmver=10.0
    
      15source=("https://github.com/ggml-org/llama.cpp/releases/download/${pkgver}/llama-${pkgver}-bin-ubuntu-rocm-${_rocmver}-x64.tar.gz")
    
      16sha256sums=('3d7028e9bb43887ff01fd34d43356baf8bdddeb0c822843781b16d311d3e5147')
    
      17
    
      18package() {
    
      19    local upstream="$srcdir/llama-$pkgver" executable
    
      20    test -f "$upstream/LICENSE"
    
      21    test -x "$upstream/llama-cli"
    
      22    test -x "$upstream/llama-server"
    
      23    compgen -G "$upstream/libggml-hip.so*" >/dev/null
    
      24
    
      25    # Keep executables, plugins, symlinks and accompanying resources together:
    
      26    # the upstream binaries and dynamically loaded backends use $ORIGIN.
    
      27    install -d "$pkgdir/usr/lib/llama.cpp-rocm" "$pkgdir/usr/bin"
    
      28    cp -a "$upstream/." "$pkgdir/usr/lib/llama.cpp-rocm/"
    
      29    install -Dm644 "$upstream/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      30    rm "$pkgdir/usr/lib/llama.cpp-rocm/LICENSE"
    
      31    for executable in "$upstream"/llama-*; do
    
      32        [[ -f "$executable" && -x "$executable" && "$executable" != *.so* ]] || continue
    
      33        ln -s "../lib/llama.cpp-rocm/${executable##*/}" "$pkgdir/usr/bin/${executable##*/}"
    
      34    done
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 08:02:16	Low	2