locally-uncensored-bin

maintainer mdrv · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt .deb from the project's official GitHub repository, which is a normal distribution method for this project; the source is verifiable and the binary is relocating a bundled sidecar to avoid conflicts, not executing untrusted remote code.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub repository, which is a normal distribution method for this project; the source is verifiable and the binary is relocating a bundled sidecar to avoid conflicts, not executing untrusted remote code.

PKGBUILD

      1# Maintainer: Umar Alfarouk <medrivia@gmail.com>
    
      2
    
      3_pkgname=locally-uncensored
    
      4pkgname=locally-uncensored-bin
    
      5pkgver=2.6.4
    
      6pkgrel=1
    
      7pkgdesc="Plug-and-play local AI studio — uncensored chat, image & video generation, and a coding agent"
    
      8arch=('x86_64')
    
      9url="https://github.com/PurpleDoubleD/locally-uncensored"
    
      10license=('AGPL-3.0-only')
    
      11depends=('cairo' 'gdk-pixbuf2' 'glib2' 'gtk3' 'hicolor-icon-theme' 'libayatana-appindicator'
    
      12         'libgcc' 'libgomp' 'libstdc++' 'libsoup3' 'openssl' 'vulkan-icd-loader' 'wayland'
    
      13         'webkit2gtk-4.1')
    
      14optdepends=('python: bundled whisper speech-to-text server')
    
      15provides=("$_pkgname=$pkgver")
    
      16conflicts=("$_pkgname")
    
      17options=('!debug')
    
      18source=("$pkgname-$pkgver.deb::https://github.com/PurpleDoubleD/$_pkgname/releases/download/v$pkgver/Locally.Uncensored_${pkgver}_amd64.deb"
    
      19        "LICENSE-$pkgver::https://raw.githubusercontent.com/PurpleDoubleD/$_pkgname/v$pkgver/LICENSE")
    
      20sha256sums=('5bb9f15ba5474358a14adaba2d1746303a6eab593bcba8433d88eb479982c043'
    
      21            'ed123c99c3a27f69c05a2ea0b3a803af84a3f7057c0f494707c294ad31935185')
    
      22
    
      23package() {
    
      24  bsdtar -xzf "$srcdir/data.tar.gz" -C "$pkgdir"
    
      25
    
      26  # Relocate the bundled llama-server sidecar out of /usr/bin into the app's
    
      27  # resource dir to avoid a file-path collision with a system llama.cpp install.
    
      28  # The app resolves the sidecar via resource_dir() (engine.rs:
    
      29  # resolve_engine_binary), so it is still found and the built-in engine works.
    
      30  mv "$pkgdir/usr/bin/llama-server" "$pkgdir/usr/lib/Locally Uncensored/llama-server"
    
      31
    
      32  install -Dm644 "LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 15:26:23	LOW	2