openaside-bin

LOW
maintainer minpeter 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

Package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not whitelisted, it is a standard release distribution method for a project, and the binary is not executed during build.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not whitelisted, it is a standard release distribution method for a project, and the binary is not executed during build.

PKGBUILD

1# Maintainer: minpeter <minpeter@users.noreply.github.com>
2# Generated by openaside release automation. Do not edit by hand.
3pkgname=openaside-bin
4pkgver=0.0.3
5pkgrel=1
6pkgdesc="OpenAside - AI-powered browser with 36-patch Chromium and GTK4 native shell"
7arch=('x86_64')
8url="https://github.com/minpeter/openaside"
9license=('UNLICENSED')
10provides=('openaside')
11conflicts=('openaside')
12options=('!strip' '!debug')
13source=("$pkgname-$pkgver.tar.gz::https://github.com/minpeter/openaside-releases/releases/download/openaside@$pkgver/openaside-$pkgver-linux-x64.tar.gz")
14sha256sums=('b690de6453204285b85acde90c36e910c960c30a19a54e52b3f4f6cbe4571128')
15
16package() {
17 cd "openaside-$pkgver"
18 # install.sh owns DESTDIR staging, desktop-entry templating
19 # (@OPENASIDE_BIN@), native-messaging manifest rendering, and permission
20 # hardening; packaging must not re-implement them against files that only
21 # exist post-install (e.g. the generated openaside.desktop).
22 DESTDIR="$pkgdir" ./install.sh --prefix /usr/local
23}
24

Changes since previous scan

--- PKGBUILD @ 2026-10-16 13:16
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
# Maintainer: minpeter <minpeter@users.noreply.github.com>
# Generated by openaside release automation. Do not edit by hand.
pkgname=openaside-bin
-pkgver=0.0.2
+pkgver=0.0.3
pkgrel=1
pkgdesc="OpenAside - AI-powered browser with 36-patch Chromium and GTK4 native shell"
arch=('x86_64')
@@ -11,7 +11,7 @@
conflicts=('openaside')
options=('!strip' '!debug')
source=("$pkgname-$pkgver.tar.gz::https://github.com/minpeter/openaside-releases/releases/download/openaside@$pkgver/openaside-$pkgver-linux-x64.tar.gz")
-sha256sums=('c3183ce160bed019c3e3e8fd7474f41764ad87ea8a0e6b7102e523677d215e09')
+sha256sums=('b690de6453204285b85acde90c36e910c960c30a19a54e52b3f4f6cbe4571128')
package() {
cd "openaside-$pkgver"

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 15:16:11 Low 2
2026-10-16 13:16:10 Low 2
2026-10-16 11:16:06 Low 2
2026-10-16 09:15:55 Low 2
2026-10-16 07:15:06 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion