onebase

LOW
maintainer Saisakthi 0 votes scanned 2026-09-18 15:28:46.039977
View on AUR
Why flagged

Package builds from source hosted on the maintainer's GitHub, which is normal for AUR; the source URL uses a placeholder but points to a plausible project location, and the only risk is the skipped checksum and low popularity, not malicious intent or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from source hosted on the maintainer's GitHub, which is normal for AUR; the source URL uses a placeholder but points to a plausible project location, and the only risk is the skipped checksum and low popularity, not malicious intent or remote code execution.

PKGBUILD

1# Maintainer: SaisakthiM saisakthicloud@gmail.com
2pkgname=onebase
3pkgver=0.1.0
4pkgrel=1
5pkgdesc="Single-writer ephemeral data store for tokens, temporary credentials, and one-off logs"
6arch=('x86_64')
7url="https://github.com/SaisakthiM/onebase"
8license=('MIT')
9depends=()
10makedepends=('rust' 'cargo')
11source=("${pkgname}-${pkgver}.tar.gz::https://github.com/yourusername/onebase/archive/v${pkgver}.tar.gz")
12sha256sums=('SKIP') # Replace with actual sha256sum after first build
13
14build() {
15 cd "${srcdir}/${pkgname}-${pkgver}"
16 cargo build --release --locked
17}
18
19package() {
20 cd "${srcdir}/${pkgname}-${pkgver}"
21
22 # Install binary
23 install -Dm755 target/release/onebase "${pkgdir}/usr/bin/onebase"
24
25 # Install man page (optional, create man1/onebase.1 if desired)
26 # install -Dm644 man/onebase.1 "${pkgdir}/usr/share/man/man1/onebase.1"
27
28 # Install license
29 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
30
31 # Install README
32 install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
33}
34

Scan history

Scanned at (UTC)SeverityRules
2026-09-18 15:28:46 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion