maki-dbdr-bin

LOW

maintainer mmoya 0 votes scanned 2026-09-02 13:50:58.396718

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a normal distribution method; the low severity is due to unverifiable origin and few votes, but it installs only a single executable with no active code execution at build/install time.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a normal distribution method; the low severity is due to unverifiable origin and few votes, but it installs only a single executable with no active code execution at build/install time.

PKGBUILD

      1# Maintainer: mmoya <mmoya at mmoya dot org>
    
      2
    
      3pkgname=maki-dbdr-bin
    
      4pkgver=0.4.12
    
      5pkgrel=1
    
      6pkgdesc="An efficient AI coding agent extendable by neovim like Lua plugins (dbdr-fork)"
    
      7arch=('x86_64')
    
      8url="https://github.com/deep-blue-dark-red/maki-dbdr"
    
      9license=('MIT')
    
      10source=("${url}/releases/download/v${pkgver}-dbdr/maki-v${pkgver}-dbdr-x86_64-unknown-linux-musl.tar.gz")
    
      11sha256sums=('d3c74c4206f4147935c8e5aa57fc48064e4afd362235bdd1eb3ebd7ef7bf6d1d')
    
      12options=('!debug')
    
      13conflicts=('maki-bin')
    
      14
    
      15package() {
    
      16    install -Dm755 maki "${pkgdir}/usr/bin/maki"
    
      17}
    
      18

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 13:50:58	Low	2