mdcon-bin
The package downloads a prebuilt binary from the maintainer's GitHub release, which is a common but less trustworthy practice than building from source; however, it is not actively malicious, and the binary is from a plausible project host.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the maintainer's GitHub release, which is a common but less trustworthy practice than building from source; however, it is not actively malicious, and the binary is from a plausible project host.
PKGBUILD
# Maintainer: Martan03 <martinslezak03@gmail.com>
pkgname=mdcon-bin
_pkgname=mdcon
pkgver=0.1.0
pkgrel=1
pkgdesc="Utility for generating Table of Contents from Markdown file."
arch=('x86_64')
url="https://github.com/Martan03/mdcon"
license=('GPL3')
provides=("$_pkgname")
conflicts=("$_pkgname")
source=("https://github.com/Martan03/$_pkgname/releases/download/v$pkgver/$_pkgname-v$pkgver-x86_64-unknown-linux-musl.tar.gz")
sha256sums=('9343d4ac5def3098e83d4bfdc26a445c77d48f0246ace81abc0a24e9a11c3d45')
package() {
cd "$srcdir/$_pkgname-v$pkgver-${CARCH}-unknown-linux-musl"
install -Dm755 "$_pkgname" "$pkgdir/usr/bin/$_pkgname"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 23:21:28 | Low | 2 |