minecrauth-bin
The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the lack of b2sum verification is a minor concern but does not imply active malice or remote code execution.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the lack of b2sum verification is a minor concern but does not imply active malice or remote code execution.
PKGBUILD
# Maintainer: solxix
pkgname=minecrauth-bin
_name=${pkgname%-bin}
pkgver=0.2.0
pkgrel=1
pkgdesc="A self-hosted Yggdrasil authentication server for Minecraft Java Edition with skins and capes."
arch=('x86_64' 'aarch64')
url="https://github.com/achetronic/minecrauth"
license=('Apache-2.0')
#depends=('')
#optdepends=('')
source_x86_64=("${_name}-${pkgver}_x86_64.tar.gz::https://github.com/achetronic/minecrauth/releases/download/v${pkgver}/minecrauth_${pkgver}_linux_amd64.tar.gz")
source_aarch64=("${_name}-${pkgver}_aarch64.tar.gz::https://github.com/achetronic/minecrauth/releases/download/v${pkgver}/minecrauth_${pkgver}_linux_arm64.tar.gz")
conflicts=('minecrauth')
b2sums_x86_64=('SKIP')
b2sums_aarch64=('SKIP')
package() {
#cd "${_name}-${pkgver}_${CARCH}"
install -Dm755 "${srcdir}/minecrauth" "${pkgdir}/usr/bin/minecrauth"
install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-21 05:14:11 | Low | 2 |