nexacl-bin

MEDIUM

maintainer NebulaTechs 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release (unofficial host for binaries), which is unverifiable and could be silently replaced, posing a supply-chain risk despite the project's plausible ownership.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary from a GitHub release (unofficial host for binaries), which is unverifiable and could be silently replaced, posing a supply-chain risk despite the project's plausible ownership.

PKGBUILD

      1# Maintainer: NebulaTechs <NebulaTechs@users.noreply.github.com>
    
      2pkgname=nexacl-bin
    
      3pkgver=2.0.0.alpha.5
    
      4pkgrel=1
    
      5pkgdesc="Nexa Minecraft Launcher - PCL-N 的继任者 (C++/Qt 重写版)"
    
      6arch=('x86_64')
    
      7url="https://github.com/Nexa-MC/PCL-N"
    
      8license=('Apache-2.0')
    
      9depends=('glibc' 'gcc-libs' 'zlib' 'fontconfig' 'libx11' 'libice' 'libsm' 'libsecret')
    
      10provides=('nexa' 'nexacl')
    
      11conflicts=('nexa' 'nexacl')
    
      12source=("https://github.com/Nexa-MC/PCL-N/releases/download/v${pkgver}/Nexa-${pkgver}-linux-x64.deb")
    
      13sha256sums=('3893cf473e07a82b9f1de4a06f6f43e2568b5acfcb5e5c73741725e00a6111ff')
    
      14options=('!strip')
    
      15
    
      16package() {
    
      17  bsdtar -Oxf "${srcdir}/Nexa-${pkgver}-linux-x64.deb" 'data.tar*' \
    
      18    | bsdtar -C "${pkgdir}" -xf -
    
      19  find "${pkgdir}" -type f \( -name '*.pdb' -o -name '*.dbg' \) -delete
    
      20  rm -rf "${pkgdir}/usr/share/doc"
    
      21}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Medium	2
2026-10-05 23:40:58	Medium	2