open-bingyan-bin

LOW
maintainer krn1pnc 0 votes scanned 2026-11-03 14:04:44.822193
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the proprietary license and lack of source availability, but there is no evidence of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the proprietary license and lack of source availability, but there is no evidence of malicious behavior.

PKGBUILD

1# Maintainer: aaaa0ggMC <lovelinux@yslwd.eu.org>
2# Contributor: krn1pnc <krn1pnc@outlook.com>
3
4pkgname=open-bingyan-bin
5pkgver=0.3.1
6pkgrel=1
7url="https://github.com/BingyanStudio/open-bingyan-bin"
8pkgdesc='Bingyan platform CLI for agents and scripts'
9arch=('x86_64')
10license=('custom:Proprietary')
11optdepends=(
12 'gnome-keyring: Store login credentials in the system keyring'
13 'kwallet: Store login credentials in KWallet'
14)
15options=('!strip' '!debug')
16
17source=('LICENSE')
18sha256sums=('7251da0057daf0971adbc2a637697253e7a4c836dcbe94333392f0caba00eda1')
19
20_asset="bingyan_${pkgver}_linux_x86_64.tar.gz"
21source_x86_64=("${_asset}::${url}/releases/download/v${pkgver}/${_asset}")
22sha256sums_x86_64=('2614ad92cd57baf61fed71c10e02fac621e89f66287ad874933dd7b3944dcc0c')
23
24package() {
25 # 安装 CLI 和许可文件。
26 # Install the CLI and the license file.
27 install -Dm755 "$srcdir/bingyan" "$pkgdir/usr/bin/bingyan"
28 install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
29}
30

Scan history

Scanned at (UTC)SeverityRules
2026-11-03 14:04:44 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion