modelstudio-cli-bin

LOW
maintainer aardbol 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the binary being unverifiable and the project having few votes and recent upload, not due to any malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the binary being unverifiable and the project having few votes and recent upload, not due to any malicious behavior.

PKGBUILD

1# Maintainer: @aardbol
2pkgname=modelstudio-cli-bin
3_pkgname=bl
4pkgver=2.3.1
5pkgrel=1
6pkgdesc='Official Model Studio CLI for AI agent frameworks, exposing models, search, multimodal, and workflows as tool calls'
7arch=('x86_64')
8url='https://github.com/modelstudioai/cli'
9license=('Apache-2.0')
10depends=('glibc' 'gcc-libs')
11provides=('modelstudio-cli')
12conflicts=('modelstudio-cli' 'modelstudio-cli-git')
13options=('!strip' '!debug')
14
15source_x86_64=("${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-linux-x64.tar.gz")
16sha256sums_x86_64=('1bcb8aec8f3bd69b982c96f5f2ba2694b81419b47afc0aeacffb0802c1d4552f')
17
18package() {
19 install -Dm755 "$srcdir/${_pkgname}-${pkgver}-linux-x64" "$pkgdir/usr/bin/${_pkgname}"
20}
21

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
# Maintainer: @aardbol
pkgname=modelstudio-cli-bin
_pkgname=bl
-pkgver=2.2.1
+pkgver=2.3.1
pkgrel=1
pkgdesc='Official Model Studio CLI for AI agent frameworks, exposing models, search, multimodal, and workflows as tool calls'
arch=('x86_64')
@@ -13,7 +13,7 @@
options=('!strip' '!debug')
source_x86_64=("${url}/releases/download/v${pkgver}/${_pkgname}-${pkgver}-linux-x64.tar.gz")
-sha256sums_x86_64=('2dc05452cb73c187888f6b0a29d619a92efbba211718246b9f6b2a65533033cd')
+sha256sums_x86_64=('1bcb8aec8f3bd69b982c96f5f2ba2694b81419b47afc0aeacffb0802c1d4552f')
package() {
install -Dm755 "$srcdir/${_pkgname}-${pkgver}-linux-x64" "$pkgdir/usr/bin/${_pkgname}"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 11:16:06 Low 2
2026-10-16 00:12:47 Low 1
2026-10-15 03:10:23 Low 1
2026-10-15 00:28:05 Low 1
2026-10-14 00:06:47 Low 1
2026-10-13 00:23:45 Low 1
2026-10-12 15:13:59 Low 1
2026-10-12 00:18:51 Low 2
2026-10-11 00:26:05 Low 2
2026-10-10 16:14:21 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion