localist-bin

LOW

maintainer modinfo 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release, which is a normal distribution method; the low severity is due to limited votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a GitHub release, which is a normal distribution method; the low severity is due to limited votes and recent upload, not malicious content.

PKGBUILD

      1pkgname=localist-bin
    
      2_version=1.20.5
    
      3pkgver=${_version//-/}
    
      4pkgrel=1
    
      5pkgdesc='A local project organizer for folders, repositories, and work in progress'
    
      6arch=('x86_64')
    
      7url='https://github.com/skorotkiewicz/localist'
    
      8# Upstream does not currently provide a license file.
    
      9license=('LicenseRef-Unknown')
    
      10depends=('gtk3' 'webkit2gtk-4.1' 'libayatana-appindicator')
    
      11provides=("localist=${pkgver}")
    
      12conflicts=('localist')
    
      13options=('!strip' '!debug')
    
      14source=("https://github.com/skorotkiewicz/localist/releases/download/v${_version}/localist_${_version}_amd64.deb")
    
      15sha256sums=('13c9971b583652a6f67cc599e41f5928ce5d0c52eb8e4898fbc2f374b1e3737b')
    
      16
    
      17package() {
    
      18  bsdtar -xf "$srcdir"/data.tar.* -C "$pkgdir"
    
      19}
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 13:16:10	Low	2
2026-10-16 01:13:57	Low	2