matsya-terminal

maintainer misternegative · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from source with no remote downloads, but has low votes and recent upload, and uses SKIP'd checksum with empty source array, which is unusual but not inherently malicious for a local build.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 80%): Package builds from source with no remote downloads, but has low votes and recent upload, and uses SKIP'd checksum with empty source array, which is unusual but not inherently malicious for a local build.

PKGBUILD

      1# Maintainer: Your Name <admin@matsyos.ml>
    
      2pkgname=matsya-terminal
    
      3pkgver=1.1
    
      4pkgrel=1
    
      5pkgdesc="Terminal of Matsya Ui"
    
      6arch=('x86_64')
    
      7url="https://github.com/MatsyaOs/terminal"
    
      8license=('GPL')
    
      9groups=('Matsya')
    
      10makedepends=('cmake' 'extra-cmake-modules' 'qt6-base' 'qt6-declarative' 'qt6-tools')
    
      11depends=('qt6-base' 'qt6-declarative')
    
      12source=()
    
      13md5sums=('SKIP')
    
      14
    
      15build() {
    
      16    cmake -B build -DCMAKE_INSTALL_PREFIX=/usr -DCMAKE_BUILD_TYPE=Release
    
      17    cmake --build build -j$(nproc)
    
      18}
    
      19
    
      20package() {
    
      21    DESTDIR="$pkgdir" cmake --install build
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 21:16:48	LOW	2