mesa-clang-v3-bin

LOW

maintainer guglovich 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs prebuilt Mesa binaries from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from a project-specific repository and the installed files are not executable code in a malicious sense; however, SKIP'd checksums reduce verifiability, warranting low severity.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs prebuilt Mesa binaries from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from a project-specific repository and the installed files are not executable code in a malicious sense; however, SKIP'd checksums reduce verifiability, warranting low severity.

PKGBUILD

      1# Maintainer: guglovich <guglovich164@gmail.com>
    
      2# Created with assistance from GLM 5.3 Flash.
    
      3pkgname=mesa-clang-v3-bin
    
      4pkgver=25.0.7.2deb13u1
    
      5pkgrel=1
    
      6pkgdesc="Argonforge Clang-built Mesa for x86-64-v3 (prebuilt)"
    
      7arch=('x86_64')
    
      8url="https://github.com/argonforge/mesa-builds"
    
      9license=('MIT')
    
      10depends=('libdrm' 'libglvnd' 'zlib' 'expat' 'wayland' 'libxcb' 'libx11' 'libxext' 'libxshmfence' 'libxxf86vm')
    
      11conflicts=('mesa')
    
      12provides=('mesa' 'libgl' 'libgles' 'vulkan-mesa-layers' 'vulkan-radeon' 'vulkan-intel' 'vulkan-virtio')
    
      13options=('!strip')
    
      14# sha256sums calculated from official release tarballs.
    
      15# Upstream occasionally re-uploads release assets, so checksums may need updating.
    
      16source=("mesa-v25.0.7-2+deb13u1-x86-64-v3.tar.zst::https://github.com/argonforge/mesa-builds/releases/download/v25.0.7-2+deb13u1/mesa-v25.0.7-2+deb13u1-x86-64-v3.tar.zst"
    
      17        "LICENSE::https://raw.githubusercontent.com/argonforge/mesa-builds/master/LICENSE")
    
      18sha256sums=('SKIP'
    
      19            'SKIP')
    
      20package() {
    
      21  cd "${srcdir}"
    
      22  bsdtar xf mesa-v25.0.7-2+deb13u1-x86-64-v3.tar.zst -C "${pkgdir}"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 16:14:21	Low	2