opencode-personal-knowledge-bin

maintainer RealGecko · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt npm distribution from the official npm registry, which is a standard and expected source for JavaScript packages; while the low vote count and recent upload are noted, the source is verifiable and the build process is transparent and non-malicious.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt npm distribution from the official npm registry, which is a standard and expected source for JavaScript packages; while the low vote count and recent upload are noted, the source is verifiable and the build process is transparent and non-malicious.

PKGBUILD

      1# Maintainer: RealGecko <alexandrbezenkov@gmail.com>
    
      2
    
      3pkgname=opencode-personal-knowledge-bin
    
      4pkgver=1.0.10
    
      5pkgrel=1
    
      6pkgdesc="Personal knowledge MCP server with vector database for the Opencode ecosystem (prebuilt npm distribution)"
    
      7arch=('x86_64')
    
      8url="https://github.com/NocturnLabs/opencode-personal-knowledge"
    
      9license=('MIT')
    
      10depends=('bun')
    
      11provides=('opencode-personal-knowledge')
    
      12conflicts=('opencode-personal-knowledge')
    
      13options=('!strip')
    
      14source=("opencode-personal-knowledge-${pkgver}.tgz::https://registry.npmjs.org/opencode-personal-knowledge/-/opencode-personal-knowledge-${pkgver}.tgz"
    
      15        "bun.lock")
    
      16sha256sums=('4e36144c6093f1c1f94befa73567601a8f6b81fe6045681260069a93686b0c15'
    
      17            '17911d948af6523dcd238da1fe3cdd23e604678f17749538fab72254a7d08297')
    
      18
    
      19prepare() {
    
      20    rm -rf opencode-personal-knowledge
    
      21    mv package opencode-personal-knowledge
    
      22    cp bun.lock opencode-personal-knowledge/bun.lock
    
      23}
    
      24
    
      25build() {
    
      26    cd opencode-personal-knowledge
    
      27    bun install --frozen-lockfile --production --no-progress
    
      28}
    
      29
    
      30package() {
    
      31    cd opencode-personal-knowledge
    
      32    local dest="$pkgdir/usr/lib/opencode-personal-knowledge"
    
      33    mkdir -p "$dest"
    
      34    cp -r dist node_modules package.json README.md "$dest/"
    
      35    install -Dm755 /dev/stdin "$pkgdir/usr/bin/opencode-personal-knowledge" <<'EOF'
    
      36#!/bin/sh
    
      37exec /usr/bin/bun /usr/lib/opencode-personal-knowledge/dist/mcp-server.js "$@"
    
      38EOF
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 11:26:16	LOW	2