mekle-bin

LOW

maintainer kristoferssolo 0 votes scanned 2026-09-28 15:21:17.813621

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the low severity is due to the binary nature and recent upload with few votes, but sources are verifiable and no malicious behavior is evident.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the low severity is due to the binary nature and recent upload with few votes, but sources are verifiable and no malicious behavior is evident.

PKGBUILD

      1# Maintainer: Kristofers Solo <aur at kristofers dot xyz>
    
      2pkgname=mekle-bin
    
      3pkgver=0.2.0
    
      4pkgrel=1
    
      5pkgdesc='Fast project discovery tool for developers (prebuilt binary)'
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://github.com/kristoferssolo/mekle'
    
      8license=('MIT' 'Apache-2.0')
    
      9depends=('glibc' 'gcc-libs')
    
      10provides=('mekle')
    
      11conflicts=('mekle' 'mekle-git')
    
      12install=mekle.install
    
      13source=("config.toml::https://raw.githubusercontent.com/kristoferssolo/mekle/v$pkgver/config/config.toml")
    
      14source_x86_64=("mekle-$pkgver-x86_64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/mekle-$pkgver-x86_64-unknown-linux-gnu.tar.gz")
    
      15source_aarch64=("mekle-$pkgver-aarch64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/mekle-$pkgver-aarch64-unknown-linux-gnu.tar.gz")
    
      16sha256sums=('67eb969fc27590e942886b0860eef4cd5317dc1102f22857d42daa6fb5778393')
    
      17sha256sums_x86_64=('2df63b0ed46736c331f78649f1e6168ff8724634ad8a7fe51a32f569da12153b')
    
      18sha256sums_aarch64=('2cbcd13443a98a7cb012ef6ffe716435174027bc5d9c71ccc2da5e1a128f4c7e')
    
      19
    
      20package() {
    
      21    local archive="mekle-$pkgver-$CARCH-unknown-linux-gnu"
    
      22    install -Dm755 "$archive/mekle" "$pkgdir/usr/bin/mekle"
    
      23    install -Dm644 config.toml "$pkgdir/usr/share/mekle/config.toml"
    
      24    install -Dm644 "$archive/LICENSE-MIT" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
    
      25    install -Dm644 "$archive/LICENSE-APACHE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-28 15:21:17	Low	2