neo4j-mcp-bin

LOW
maintainer agony4001 0 votes scanned 2026-11-04 18:07:34.859631
View on AUR
Why flagged

The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; telemetry disclosure in the .install script is transparent and non-malicious, posing privacy considerations but no active harm or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; telemetry disclosure in the .install script is transparent and non-malicious, posing privacy considerations but no active harm or remote code execution.

PKGBUILD

1# Maintainer: agony <27015 at riseup dot net>
2
3pkgname=neo4j-mcp-bin
4pkgver=2.1.0
5pkgrel=1
6pkgdesc='Neo4j official MCP server (prebuilt)'
7arch=('x86_64' 'aarch64')
8url='https://github.com/neo4j/mcp'
9license=('GPL-3.0-only')
10provides=("neo4j-mcp=${pkgver}")
11conflicts=('neo4j-mcp')
12install=neo4j-mcp.install
13_release="${url}/releases/download/v${pkgver}"
14source_x86_64=("neo4j-mcp-${pkgver}-x86_64.tar.gz::${_release}/neo4j-mcp_Linux_x86_64.tar.gz")
15source_aarch64=("neo4j-mcp-${pkgver}-aarch64.tar.gz::${_release}/neo4j-mcp_Linux_arm64.tar.gz")
16sha256sums_x86_64=('08df1b370d0e96a2d30dd1bcfd86f32233165956f0be119140e43d0636650723')
17sha256sums_aarch64=('4da528ba2794211a22b15507d1cfadafac3ed601ca8da9b89fd7f9cac226d810')
18
19package() {
20 install -Dm755 neo4j-mcp -t "${pkgdir}/usr/bin"
21}
22

Scan history

Scanned at (UTC)SeverityRules
2026-11-04 18:07:34 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion