nocodb-bin

maintainer danielneves · 4 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the binary is installed as an executable, but the source is verifiable and from a trusted project host, so the risk is low despite the binary not being built from source.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the binary is installed as an executable, but the source is verifiable and from a trusted project host, so the risk is low despite the binary not being built from source.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2# Contributor: tee < teeaur at duck dot com >
    
      3
    
      4pkgname=nocodb-bin
    
      5pkgver=2026.06.1
    
      6pkgrel=1
    
      7pkgdesc="Open Source Airtable Alternative: Turns any MySQL, PostgreSQL, SQL Server, SQLite & MariaDB into a smart spreadsheet."
    
      8
    
      9arch=("x86_64")
    
      10license=('SUL-1.0')
    
      11
    
      12url="https://nocodb.com"
    
      13_src="https://github.com/nocodb/nocodb"
    
      14
    
      15provides=(nocodb)
    
      16conflicts=(nocodb)
    
      17depends=(libgcc glibc libstdc++)
    
      18
    
      19install="${pkgname}.install"
    
      20options=(!strip)
    
      21
    
      22_exe="${pkgname}-${pkgver}-${CARCH}"
    
      23
    
      24source=("README-${pkgver}.md::${_src}/raw/${pkgver}/README.md"
    
      25		"LICENSE-${pkgver}::${_src}/raw/${pkgver}/LICENSE.md")
    
      26source_x86_64=("${_exe}::${_src}/releases/download/${pkgver}/Noco-linux-x64")
    
      27sha256sums=('f640d4b8b293cd9bc8741204be02bbb475d91ce66e9452eecf0fc7f715853445'
    
      28            'cbad8f8d8eb636b3b19cce7131b1fe930cef68f9fbaeeb28ec90543319acf9d6')
    
      29sha256sums_x86_64=('51e481c9bf84fd71d23740e321caa6d327fa54da3a570a02a733bfff4c1aa3c5')
    
      30
    
      31
    
      32package() {
    
      33	cd "${srcdir}" || exit 1
    
      34
    
      35	install -Dm755 "${_exe}" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      36
    
      37	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      38
    
      39	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      40}
    
      41

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-03 00:08
@@ -19,10 +19,10 @@
 install="${pkgname}.install"
 options=(!strip)
 
-_exe="$pkgname-$pkgver-$CARCH"
+_exe="${pkgname}-${pkgver}-${CARCH}"
 
-source=("${_src}/raw/${pkgver}/README.md"
-	"${_src}/raw/${pkgver}/LICENSE.md")
+source=("README-${pkgver}.md::${_src}/raw/${pkgver}/README.md"
+		"LICENSE-${pkgver}::${_src}/raw/${pkgver}/LICENSE.md")
 source_x86_64=("${_exe}::${_src}/releases/download/${pkgver}/Noco-linux-x64")
 sha256sums=('f640d4b8b293cd9bc8741204be02bbb475d91ce66e9452eecf0fc7f715853445'
             'cbad8f8d8eb636b3b19cce7131b1fe930cef68f9fbaeeb28ec90543319acf9d6')
@@ -34,8 +34,8 @@
 
 	install -Dm755 "${_exe}" "${pkgdir}/usr/bin/${pkgname%-bin}"
 
-	install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
+	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
 
-	install -Dm644 "LICENSE.md" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
+	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 11:11:22	MEDIUM	1
2026-06-30 02:36:37	CLEAN	0
2026-06-18 16:11:54	CLEAN	0