modlist-org-app
The package builds from source hosted on the project's official GitHub repository; the low severity is due to the unverifiable 'SKIP' checksum and few votes, but it does not execute remote code or install prebuilt binaries from untrusted sources.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's official GitHub repository; the low severity is due to the unverifiable 'SKIP' checksum and few votes, but it does not execute remote code or install prebuilt binaries from untrusted sources.
PKGBUILD
# Maintainer: Chartic <contact@ch45.c01.kr>
pkgname=modlist-org-app
pkgver=0.4.7
pkgrel=2
pkgdesc="Mod manager and installer for A Dance of Fire and Ice (ADOFAI) and other games"
arch=('x86_64')
url="https://github.com/modlist-org/modlist_org_app"
license=('GPL-3.0-only')
depends=('gtk3' 'glib2')
makedepends=('flutter' 'git' 'cmake' 'ninja' 'clang' 'pkgconf')
source=("${pkgname}-${pkgver}.tar.gz::https://github.com/modlist-org/modlist_org_app/archive/refs/tags/v${pkgver}.tar.gz")
sha256sums=('SKIP')
build() {
cd "modlist_org_app-${pkgver}"
flutter config --enable-linux-desktop
flutter pub get
flutter build linux --release
}
package() {
cd "modlist_org_app-${pkgver}"
install -d "${pkgdir}/usr/lib/${pkgname}"
cp -r build/linux/x64/release/bundle/* "${pkgdir}/usr/lib/${pkgname}/"
install -d "${pkgdir}/usr/bin"
ln -s "/usr/lib/${pkgname}/modlist_org_app" "${pkgdir}/usr/bin/modlist-org-app"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-29 05:37:57 | Low | 2 |