oasdiff-bin

LOW

maintainer agony4001 0 votes scanned 2026-10-27 13:48:00.041465

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and acceptable practice; the low severity reflects the use of unverified prebuilt binaries, but the source is trustworthy and the package does not execute unreviewed remote code.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and acceptable practice; the low severity reflects the use of unverified prebuilt binaries, but the source is trustworthy and the package does not execute unreviewed remote code.

PKGBUILD

      1# Maintainer: agony <27015 at riseup dot net>
    
      2
    
      3pkgname=oasdiff-bin
    
      4pkgver=1.34.1
    
      5pkgrel=1
    
      6pkgdesc='Diff and breaking changes for OpenAPI specifications (prebuilt)'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/oasdiff/oasdiff'
    
      9license=('Apache-2.0')
    
      10provides=("oasdiff=${pkgver}")
    
      11conflicts=('oasdiff')
    
      12_release="${url}/releases/download/v${pkgver}"
    
      13source_x86_64=("${_release}/oasdiff_${pkgver}_linux_amd64.tar.gz")
    
      14source_aarch64=("${_release}/oasdiff_${pkgver}_linux_arm64.tar.gz")
    
      15sha256sums_x86_64=('75775f65b0adebd26a8e013af51a799342dfdc6262d89efa9e3b7bdf89657d90')
    
      16sha256sums_aarch64=('e8f99bbf102a4b7f235104da72d0b9d67702e78622d1d4d37169e698ee90a249')
    
      17
    
      18build() {
    
      19  for shell in bash fish zsh; do
    
      20    ./oasdiff completion "${shell}" > "completion.${shell}"
    
      21  done
    
      22}
    
      23
    
      24package() {
    
      25  install -Dm755 oasdiff -t "${pkgdir}/usr/bin"
    
      26  install -Dm644 completion.bash "${pkgdir}/usr/share/bash-completion/completions/oasdiff"
    
      27  install -Dm644 completion.fish "${pkgdir}/usr/share/fish/vendor_completions.d/oasdiff.fish"
    
      28  install -Dm644 completion.zsh "${pkgdir}/usr/share/zsh/site-functions/_oasdiff"
    
      29}
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 13:48:00	Low	2