loago-bin

LOW

maintainer jackssrt 0 votes scanned 2026-09-25 15:12:17.861096

View on AUR

Why flagged

The package installs a prebuilt binary from the project's GitHub releases, which is a normal distribution method; while the host is not whitelisted, it is the project's official source, and there is no evidence of malicious behavior or code execution beyond standard packaging.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's GitHub releases, which is a normal distribution method; while the host is not whitelisted, it is the project's official source, and there is no evidence of malicious behavior or code execution beyond standard packaging.

PKGBUILD

      1# Maintainer: jackssrt <jack at jackssrt dot com>
    
      2pkgname="loago-bin"
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5epoch=
    
      6pkgdesc="Track how long ago you last did a task"
    
      7arch=("x86_64")
    
      8url="https://github.com/Axlefublr/loago"
    
      9license=("MIT")
    
      10depends=(gcc-libs)
    
      11makedepends=()
    
      12checkdepends=()
    
      13optdepends=()
    
      14provides=("loago")
    
      15conflicts=("loago")
    
      16
    
      17source=("$pkgname-$pkgver-x86_64-unknown-linux-gnu.tar.gz::${url}/releases/download/$pkgver/loago-x86_64-unknown-linux-gnu.tar.gz")
    
      18sha256sums=("2348194e5f0346979b1ff25aa9d60510ea82bf722f8fea5efbc561a557ba5084")
    
      19
    
      20package() {
    
      21	install -Dm0755 "$srcdir/loago" "$pkgdir/usr/bin/loago"
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 15:12:17	Low	2