ollaya-bin

LOW

maintainer modinfo 0 votes scanned 2026-09-26 01:13:50.698724

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's GitHub releases, which is a normal AUR pattern; the low severity is due to the unverified origin of the binaries, but they are from the project's official repository and checksummed.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's GitHub releases, which is a normal AUR pattern; the low severity is due to the unverified origin of the binaries, but they are from the project's official repository and checksummed.

PKGBUILD

      1# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
    
      2pkgname=ollaya-bin
    
      3pkgver=0.6.0
    
      4pkgrel=1
    
      5pkgdesc="Run open decision models locally, the way Ollama runs LLMs (prebuilt binaries)"
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://github.com/ollaya-dev/ollaya'
    
      8license=('Apache-2.0')
    
      9depends=('gcc-libs')
    
      10options=(!strip)
    
      11optdepends=('nvidia-utils: GPU acceleration on NVIDIA GPUs (CUDA 13 driver R580+, amd64 only)')
    
      12provides=('ollaya')
    
      13conflicts=('ollaya')
    
      14install='ollaya.install'
    
      15
    
      16source=('ollaya.service'
    
      17        'ollaya.sysusers')
    
      18source_x86_64=("$pkgname-$pkgver-x86_64.tar.zst::$url/releases/download/v$pkgver/ollaya-linux-amd64.tar.zst")
    
      19source_aarch64=("$pkgname-$pkgver-aarch64.tar.zst::$url/releases/download/v$pkgver/ollaya-linux-arm64.tar.zst")
    
      20
    
      21sha256sums=('e6a2415aa487f882d2075bfbe033b846063be1fde510cbd3965a696f6a9f300e'
    
      22            '888ff9184a099058f147d9ecadeeb7e26b69d536544a32cfc1777b6b3214c99b')
    
      23sha256sums_x86_64=('7f9a2388c287d2951efd21829a18a91c0800e04b59a88cc32332319a90f68c59')
    
      24sha256sums_aarch64=('fe3ee38380b52ed02057039c0ef7261a9880707a3e374222211105121e3d7e35')
    
      25
    
      26# The release archives have no top-level directory; they unpack to bin/ and share/.
    
      27package() {
    
      28  cd "$srcdir"
    
      29
    
      30  install -d "$pkgdir/usr/bin" "$pkgdir/usr/share"
    
      31  cp -t "$pkgdir/usr/bin" bin/*
    
      32  cp -rt "$pkgdir/usr/share" share/*
    
      33
    
      34  # Arch convention: the license also lives in /usr/share/licenses/$pkgname.
    
      35  install -Dm644 share/doc/ollaya/LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      36
    
      37  # Systemd service and user, adapted from packaging/ollaya.service upstream.
    
      38  install -Dm644 "$srcdir/ollaya.service" "$pkgdir/usr/lib/systemd/system/ollaya.service"
    
      39  install -Dm644 "$srcdir/ollaya.sysusers" "$pkgdir/usr/lib/sysusers.d/ollaya.conf"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-26 01:13:50	Low	2