opencode-sandbox-bin

LOW
maintainer Antiquete 0 votes scanned 2026-10-07 00:21:34.957174
View on AUR
Why flagged

The package installs prebuilt binaries from the project's official GitHub releases, which is a normal practice for -bin packages; the low severity is due to limited votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases, which is a normal practice for -bin packages; the low severity is due to limited votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: antiquete <antiquete@proton.me>
2
3pkgname=opencode-sandbox-bin
4pkgver=1.7.0
5pkgrel=1
6pkgdesc="Run OpenCode inside an isolated container (prebuilt release)"
7arch=("x86_64")
8url="https://github.com/Antiquete/opencode-sandbox"
9license=("GPL-3.0-or-later")
10provides=("opencode-sandbox")
11conflicts=("opencode-sandbox-git")
12depends=("bash")
13optdepends=("docker: Docker runtime" "podman: Podman runtime")
14source=("opencode-sandbox-$pkgver.tar.gz::https://github.com/Antiquete/opencode-sandbox/releases/download/v$pkgver/opencode-sandbox-$pkgver.tar.gz")
15sha256sums=("c1dcc5b661000e6814b94a516dfe605d476ef6cc8910818a4bf0d5b9e73f4d40")
16
17package() {
18 cd "$srcdir/opencode-sandbox-$pkgver"
19 install -Dm755 opencode-sandbox "$pkgdir/usr/bin/opencode-sandbox"
20 install -Dm755 opencode-project-init "$pkgdir/usr/bin/opencode-project-init"
21 install -Dm755 build/opencode-guard "$pkgdir/usr/lib/opencode-sandbox/guard"
22}

Scan history

Scanned at (UTC)SeverityRules
2026-10-07 00:21:34 Low 2
2026-10-07 00:04:18 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion