moss (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a legitimate source tarball hosted on GitHub under the maintainer's own repository, which is consistent with normal AUR packaging practices; the low vote count and recent upload are not indicative of malicious intent.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Brandon Mulcahy <brandon@jangler.info>
    
      2pkgname=moss
    
      3pkgver=1.1.0
    
      4pkgrel=2
    
      5pkgdesc="Mostly orthogonal sequencing server"
    
      6arch=('any')
    
      7url="http://jangler.info/code/${pkgname}"
    
      8license=('MIT')
    
      9makedepends=('go')
    
      10source=("https://github.com/jangler/${pkgname}/archive/${pkgver}.tar.gz")
    
      11sha256sums=('550f76cf436aae775698c1368a57411fbd43d25aef07209d2022b0531fde296e')
    
      12
    
      13build() {
    
      14  cd "${srcdir}/${pkgname}-${pkgver}"
    
      15  go build -o ${pkgname}
    
      16}
    
      17
    
      18package() {
    
      19  cd "${srcdir}/${pkgname}-${pkgver}"
    
      20  install -Dm755 ${pkgname} "${pkgdir}/usr/bin/${pkgname}"
    
      21  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 00:03:55	Clean	2
2026-10-18 23:23:07	Low	1