multi-git-status

LOW

maintainer barbuk 3 votes scanned 2026-08-26 00:12:07.713121

View on AUR

Why flagged

The package builds from a source tarball hosted on GitHub, which is the project's official repository; the flagged pattern is based on package adoption history, not malicious content, and the build installs only the project's own scripts and documentation.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball hosted on GitHub, which is the project's official repository; the flagged pattern is based on package adoption history, not malicious content, and the build installs only the project's own scripts and documentation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Amin Vakil <info AT aminvakil DOT com>
    
      2# Contributor: Bart Louwers <sleeping@emeel.net>
    
      3pkgname=multi-git-status
    
      4pkgver=2.3
    
      5pkgrel=1
    
      6pkgdesc='Show uncommited, untracked and unpushed changes in multiple Git repositories.'
    
      7arch=('any')
    
      8url='https://github.com/fboender/multi-git-status'
    
      9license=('MIT')
    
      10source=("${pkgname}-${pkgver}-${pkgrel}::${url}/archive/${pkgver}.tar.gz")
    
      11sha256sums=('2634b4b8b3d69a397f5462ec1d72a77d5b395f363ed8e1aabfbf7e5e4172f93f')
    
      12
    
      13package() {
    
      14	cd "$pkgname-$pkgver"
    
      15	install -d "$pkgdir"/usr/bin/
    
      16	install -d "$pkgdir"/usr/share/man/man1/
    
      17	install mgitstatus "$pkgdir"/usr/bin/
    
      18	install mgitstatus.1 "$pkgdir"/usr/share/man/man1/
    
      19	install -Dm644 LICENSE.txt "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      20}
    
      21

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 00:12:07	Low	2
2026-08-25 23:28:42	Medium	1
2026-06-18 16:11:54	Clean	0