notav-bin

LOW
maintainer SelfRef 0 votes scanned 2026-10-26 00:12:40.318206
View on AUR
Why flagged

Package downloads a prebuilt release tarball from GitHub releases; source is not built locally, but the tarball hash is verified and the software is a local notes/journal app with no indication of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads a prebuilt release tarball from GitHub releases; source is not built locally, but the tarball hash is verified and the software is a local notes/journal app with no indication of malicious behavior.

PKGBUILD

1# Maintainer: SelfRef <arch@selfref.dev>
2
3_pkgbase=notav
4pkgname="$_pkgbase-bin"
5pkgver=0.1.0
6pkgrel=1
7pkgdesc='Notes and a journal kept in your Nextcloud'
8arch=('x86_64')
9url='https://github.com/AperteDev/notav'
10license=('GPL-3.0-or-later')
11depends=('gtk4' 'libadwaita>=1:1.8' 'gtksourceview5' 'libsecret' 'sqlite' 'glib2' 'libgcc' 'glibc')
12optdepends=('gnome-online-accounts: sign in with a GNOME Online Accounts account'
13 'org.freedesktop.secrets: keep the passwords in the system keyring')
14provides=("$_pkgbase")
15conflicts=("$_pkgbase")
16source_x86_64=("$_pkgbase-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-$pkgver-x86_64.tar.gz")
17noextract=("$_pkgbase-$pkgver-x86_64.tar.gz")
18sha256sums_x86_64=('c88b8b923ced98137080c792eac6a82720d7ea3d6fc6a517d684ffcb67b630cd')
19
20package() {
21 bsdtar -xf "$_pkgbase-$pkgver-x86_64.tar.gz" -C "$pkgdir" --no-same-owner
22}
23

Scan history

Scanned at (UTC)SeverityRules
2026-10-26 00:12:40 Low 2
2026-10-25 23:43:15 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion