nodewipe

LOW

maintainer JOKER53 0 votes scanned 2026-08-26 05:29:31.779280

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's GitHub releases, which is a common and generally acceptable practice; while the host is not whitelisted, it is the project's official source, and the binary is installed directly without obfuscation or additional execution risks.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's GitHub releases, which is a common and generally acceptable practice; while the host is not whitelisted, it is the project's official source, and the binary is installed directly without obfuscation or additional execution risks.

PKGBUILD

      1# Maintainer: KADHIRAVANEG <kadhiravanegk@gmail.com>
    
      2pkgname=nodewipe
    
      3pkgver=0.5.0
    
      4pkgrel=1
    
      5pkgdesc="Find and reclaim disk space from stray dev artifacts (node_modules, Python venvs, Rust/Java/JS build caches, and more)"
    
      6arch=('x86_64')
    
      7url="https://github.com/KADHIRAVANEG/nodewipe"
    
      8license=('MIT')
    
      9provides=('nodewipe')
    
      10conflicts=('nodewipe-bin')
    
      11source=("nodewipe-${pkgver}::https://github.com/KADHIRAVANEG/nodewipe/releases/download/v${pkgver}/nodewipe-linux-x86_64")
    
      12sha256sums=('a7386034d8fdac617ba7f03d5a65b82734bc83f382a1fc911f3fdd9772f304ea')
    
      13
    
      14package() {
    
      15    install -Dm755 "${srcdir}/nodewipe-${pkgver}" "${pkgdir}/usr/bin/nodewipe"
    
      16}
    
      17

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 05:29:31	Low	2