mantisbt-cli-bin
The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the limited trustworthiness of the source given few votes and recent upload, but the binaries are checksummed and from a legitimate project host.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the limited trustworthiness of the source given few votes and recent upload, but the binaries are checksummed and from a legitimate project host.
PKGBUILD
# Maintainer: shbernal <shbernal.01@gmail.com>
_pkgname=mantisbt-cli
pkgname=${_pkgname}-bin
pkgver=0.3.0
pkgrel=1
pkgdesc='Command line client for the MantisBT REST API'
arch=('x86_64' 'aarch64')
url='https://github.com/overworks/mantisbt-cli'
license=('MIT')
provides=('mantisbt-cli')
conflicts=('mantisbt-cli')
options=('!debug')
source_x86_64=("${_pkgname}-${pkgver}-amd64.tar.gz::${url}/releases/download/v${pkgver}/mantisbt-cli_${pkgver}_linux_amd64.tar.gz")
source_aarch64=("${_pkgname}-${pkgver}-arm64.tar.gz::${url}/releases/download/v${pkgver}/mantisbt-cli_${pkgver}_linux_arm64.tar.gz")
sha256sums_x86_64=('27ef051e0835e91f90168d03ad45aa5f4524065260ebaeac9f95eb17a82af423')
sha256sums_aarch64=('491b1f696b2f08af8bc7cce83ef7d9a47f3f69f187e3a83388267db543474625')
package() {
install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 23:13:54 | Low | 2 |