nebu

LOW

maintainer nickheyer 0 votes scanned 2026-09-16 09:21:46.704965

View on AUR

Why flagged

Package builds from a source tarball hosted on the project's own GitHub release page, which is a common and acceptable practice; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a source tarball hosted on the project's own GitHub release page, which is a common and acceptable practice; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# This file was generated by GoReleaser. DO NOT EDIT.
    
      2# Maintainer: nickheyer
    
      3
    
      4pkgname='nebu'
    
      5pkgver=0.1.0
    
      6pkgrel=1
    
      7pkgdesc='Model storage, inference runtime management, and API gateway'
    
      8url='https://github.com/nickheyer/nebu'
    
      9arch=('aarch64' 'x86_64')
    
      10license=('MIT')
    
      11provides=('nebu')
    
      12conflicts=('nebu-bin')
    
      13depends=('ca-certificates')
    
      14makedepends=('go>=1.27' 'nodejs>=22' 'npm' 'buf' 'make')
    
      15optdepends=('git: git model sources' 'cmake: building llama.cpp' 'gcc: compiling inference runtimes' 'python: Python inference runtimes' 'python-pip: installing Python inference runtimes' 'cuda: building CUDA inference runtimes' 'nvidia-utils: NVIDIA device probing' 'hip-runtime-amd: AMD inference runtimes' 'rocm-smi-lib: AMD device probing' 'docker: optional container build sandbox')
    
      16backup=('etc/nebu/config.yaml')
    
      17source=("${pkgname}_${pkgver}.tar.gz::https://github.com/nickheyer/nebu/releases/download/v${pkgver}/nebu_${pkgver}_source.tar.gz")
    
      18sha256sums=('49d6f17f98f6fd307a48d745d8324cf27c450689e07dba900480f267701c8707')
    
      19prepare() {
    
      20  export GOTOOLCHAIN=local
    
      21  go mod download
    
      22  make gen
    
      23  npm ci --no-audit --no-fund --prefix web/nebu
    
      24
    
      25}
    
      26build() {
    
      27  export CGO_ENABLED=0 GOTOOLCHAIN=local
    
      28  npm run build --prefix web/nebu
    
      29  go build -trimpath -mod=readonly -buildmode=pie \
    
      30  -ldflags "-X github.com/nickheyer/nebu/internal/cli.releaseVersion=${pkgver}" \
    
      31  -o nebu ./cmd/nebu
    
      32
    
      33}
    
      34package() {
    
      35  install -Dm755 nebu "${pkgdir}/usr/bin/nebu"
    
      36  install -Dm644 packaging/config.yaml "${pkgdir}/etc/nebu/config.yaml"
    
      37  install -Dm644 packaging/nebu.service "${pkgdir}/usr/lib/systemd/user/nebu.service"
    
      38  install -Dm644 README.md "${pkgdir}/usr/share/doc/nebu/README.md"
    
      39  for file in LICENSE*; do
    
      40  [ -f "$file" ] || continue
    
      41  install -Dm644 "$file" "${pkgdir}/usr/share/licenses/nebu/$file"
    
      42  done
    
      43
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 09:21:46	Low	2