madc-bin
The package downloads prebuilt binaries from GitHub releases and documentation files from the project's repository; while the host is not whitelisted, it is the official project GitHub, and the binaries are from tagged releases with provided checksums, limiting supply-chain risk to low.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases and documentation files from the project's repository; while the host is not whitelisted, it is the official project GitHub, and the binaries are from tagged releases with provided checksums, limiting supply-chain risk to low.
PKGBUILD
# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
_gitauthor=derekbsnider
_gitname=madc
_appname=${_gitname}
pkgname=${_appname}-bin
pkgdesc="A self-contained C/C++ language with built-in compiler/linker, JIT, AOT and an interactive REPL"
pkgver=0.106.0
pkgrel=1
_gitversion=v${pkgver}
arch=('x86_64')
_barch=('linux-x86_64')
_ghurl="https://github.com/${_gitauthor}/${_gitname}"
_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
url=${_ghurl}
license=('MPL-2.0')
provides=("${_appname}")
conflicts=("${pkgname%-bin}")
depends=('glibc' 'libgcc' 'libstdc++' 'glib2' 'zstd' 'zlib' 'pcre2' 'webkitgtk-6.0')
options=('!strip' 'staticlibs')
source=("USAGE-${pkgver}.md::${_ghurlraw}/docs/usage.md"
"README-${pkgver}.md::${_ghurlraw}/README.md"
"LICENSE-${pkgver}::${_ghurlraw}/LICENSE")
source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${pkgver}-${_barch[0]}.tar.gz")
sha256sums=('0437e62763864e95d8916e8bc3ed31dc88b1ad7127963c65dfdf1fec690bc5b5'
'6d6729a055684eb0134544283af9ebe91c31d57c2f3f0a45872d619828de5b4d'
'1f256ecad192880510e84ad60474eab7589218784b9a50bc7ceee34c2b91f1d5')
sha256sums_x86_64=('d4b6bb3e43e17376d28c950b4edf28583a17b76e8b46e57dd5d5a0d3740d30b8')
case ${CARCH} in
${arch[0]})
_CARCH=${_barch[0]}
;;
esac
package() {
cd "${srcdir}/${_appname}-${pkgver}-${_CARCH}/" || exit
install -Dm755 "bin/${_appname}" -t "${pkgdir}/usr/bin/"
install -dm755 "${pkgdir}/usr/lib"
cp -rfa "lib/"* "${pkgdir}/usr/lib/"
install -Dm644 /dev/stdin "${pkgdir}/etc/apparmor.d/${_appname}" <<EOF
# madc's windows are WebKitGTK, whose sandbox (bwrap) needs user namespaces.
# This profile allows everything else, as before; it only names the
# program so AppArmor grants them.
abi <abi/4.0>,
include <tunables/global>
profile ${_appname} /usr/bin/${_appname} flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/${_appname}>
}
EOF
install -Dm644 "share/man/man1/${_appname}.1.gz" -t "${pkgdir}/usr/share/man/man1/"
install -Dm644 "share/doc/${_appname}/examples/${_appname}.ini" "${pkgdir}/usr/share/doc/${pkgname}/config/${_appname}.example.ini"
install -Dm644 "../USAGE-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/USAGE.md"
install -Dm644 "../README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
install -Dm644 "../LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-24 05:39:24 | Low | 2 |