norupo-bin

LOW

maintainer mahmoud-ts 0 votes scanned 2026-09-23 01:39:21.955055

View on AUR

Why flagged

The package installs prebuilt static binaries from the project's official GitHub releases, which is a normal and acceptable practice for AUR packages; the low severity reflects the use of unreviewed prebuilt binaries, but they are from the project's official source with verifiable checksums.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs prebuilt static binaries from the project's official GitHub releases, which is a normal and acceptable practice for AUR packages; the low severity reflects the use of unreviewed prebuilt binaries, but they are from the project's official source with verifiable checksums.

PKGBUILD

      1# Maintainer: Mahmoud Walid <modywmbadr@gmail.com>
    
      2#
    
      3# Installs the prebuilt, statically linked musl binaries from the GitHub
    
      4# release. No Rust toolchain required.
    
      5
    
      6pkgname=norupo-bin
    
      7_pkgname=norupo
    
      8pkgver=0.1.1
    
      9pkgrel=1
    
      10pkgdesc="Self-hosted local tunneling service (edge server + CLI agent), like ngrok - prebuilt binaries"
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://github.com/Mahmoud-walid/Norupo-tunnel"
    
      13license=('Apache-2.0')
    
      14# The musl builds are static, so there is nothing to depend on.
    
      15depends=()
    
      16optdepends=(
    
      17  'redis: shared routing table for multi-node edge deployments'
    
      18)
    
      19provides=('norupo' 'norupo-server')
    
      20conflicts=('norupo' 'norupo-git')
    
      21backup=('etc/norupo/server.env')
    
      22
    
      23source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/norupo-$pkgver-x86_64-unknown-linux-musl.tar.gz")
    
      24source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::$url/releases/download/v$pkgver/norupo-$pkgver-aarch64-unknown-linux-musl.tar.gz")
    
      25# Replaced by `updpkgsums` at publish time.
    
      26sha256sums_x86_64=('7fcf33af98d77ecf0f8ee720c5ce9dc50b40fae56ca0e19748b21fcd47902630')
    
      27sha256sums_aarch64=('3b684fb0dddabae45cbb95b072b268c88c945ac7bcc107a85ece9f44b28fcd17')
    
      28
    
      29package() {
    
      30  local _target
    
      31  case "$CARCH" in
    
      32    x86_64) _target="x86_64-unknown-linux-musl" ;;
    
      33    aarch64) _target="aarch64-unknown-linux-musl" ;;
    
      34    *) echo "unsupported architecture: $CARCH" >&2; return 1 ;;
    
      35  esac
    
      36
    
      37  cd "$srcdir/norupo-$pkgver-$_target"
    
      38
    
      39  install -Dm0755 norupo "$pkgdir/usr/bin/norupo"
    
      40  install -Dm0755 norupo-server "$pkgdir/usr/bin/norupo-server"
    
      41  install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      42  install -Dm0644 README.md "$pkgdir/usr/share/doc/$_pkgname/README.md"
    
      43
    
      44  # Same server-side files as the `norupo` package, so the two really are
    
      45  # interchangeable and `backup=` above names files that ship.
    
      46  install -Dm0644 systemd/norupo-server.service \
    
      47    "$pkgdir/usr/lib/systemd/system/norupo-server.service"
    
      48  install -Dm0644 systemd/server.env "$pkgdir/etc/norupo/server.env"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-23 01:39:21	Low	2