luna-gpt

maintainer arunachalam · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged Package builds from a legitimate git source with a SKIP'd checksum, but the source is the project's own GitHub repo; the risk is low as it's a common AUR practice, though checksums should be provided.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a legitimate git source with a SKIP'd checksum, but the source is the project's own GitHub repo; the risk is low as it's a common AUR practice, though checksums should be provided.

PKGBUILD

1# Maintainer: Arunachalam <arunachalam@archlinux>
2pkgname=luna-gpt
3pkgver=1.0.0
4pkgrel=1
5pkgdesc="Arunachalam's An advanced cybersecurity chatbot and intelligent desktop assistant for Arch Linux. Developed by a 7-year veteran builder based in (Tamil Nadu), India."
6arch=('any')
7url="https://github.com/Arunachalam-gojosaturo/Luna-gpt"
8license=('MIT')
9depends=('nodejs')
10makedepends=('npm' 'git')
11source=("git+https://github.com/Arunachalam-gojosaturo/Luna-gpt.git")
12sha256sums=('SKIP')
13
14package() {
15 mkdir -p "${pkgdir}/opt/luna-gpt"
16 cp -r "${srcdir}/Luna-gpt/"* "${pkgdir}/opt/luna-gpt/"
17
18 mkdir -p "${pkgdir}/usr/bin"
19 echo '#!/bin/sh' > "${pkgdir}/usr/bin/luna-gpt"
20 echo 'cd /opt/luna-gpt && npm start' >> "${pkgdir}/usr/bin/luna-gpt"
21 chmod +x "${pkgdir}/usr/bin/luna-gpt"
22}
23

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 03:13:55 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion