omnidotdev-taproot-bin

LOW

maintainer lotus 0 votes scanned 2026-11-03 22:05:32.218858

View on AUR

Why flagged

The package is a pre-built binary from a project-owned GitHub release, which is a normal AUR pattern; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package is a pre-built binary from a project-owned GitHub release, which is a normal AUR pattern; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: Omni <team@omni.dev>
    
      2pkgname=omnidotdev-taproot-bin
    
      3pkgver=0.2.0
    
      4pkgrel=1
    
      5pkgdesc="Auto-generate a full GraphQL API from a PostgreSQL database (pre-built)"
    
      6arch=('x86_64')
    
      7url="https://taproot.omni.dev"
    
      8license=('Apache-2.0')
    
      9depends=()
    
      10provides=('omnidotdev-taproot')
    
      11conflicts=('omnidotdev-taproot')
    
      12source=("$pkgname-$pkgver.tar.gz::https://github.com/omnidotdev/taproot/releases/download/v$pkgver/taproot-x86_64-unknown-linux-gnu.tar.gz"
    
      13        "$pkgname-$pkgver-LICENSE::https://raw.githubusercontent.com/omnidotdev/taproot/v$pkgver/LICENSE.md")
    
      14
    
      15package() {
    
      16  install -Dm755 "taproot" "$pkgdir/usr/bin/taproot"
    
      17  install -Dm644 "$pkgname-$pkgver-LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      18}
    
      19sha256sums=('e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
    
      20            'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855')
    
      21

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 22:05:32	Low	2