openfootmanager-bin

LOW

maintainer coxackie 0 votes scanned 2026-10-06 12:02:18.455551

View on AUR

Why flagged

The package downloads a prebuilt .deb from the project's official GitHub releases, which is unpacked and installed; while the source is not built from scratch, it comes from a trusted project host, limiting supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the project's official GitHub releases, which is unpacked and installed; while the source is not built from scratch, it comes from a trusted project host, limiting supply-chain risk.

PKGBUILD

      1# Maintainer: coxackie <kostas.kardaras@gmail.com>
    
      2
    
      3pkgname=openfootmanager-bin
    
      4pkgver=0.2.0
    
      5pkgrel=1
    
      6pkgdesc="Open-source football management simulation game"
    
      7arch=('x86_64')
    
      8url="https://github.com/openfootmanager/openfootmanager"
    
      9license=('GPL-3.0-or-later')
    
      10depends=('webkit2gtk-4.1' 'gtk3')
    
      11
    
      12source=(
    
      13    "Openfoot.Manager_${pkgver}_amd64.deb::https://github.com/openfootmanager/openfootmanager/releases/download/v${pkgver}/Openfoot.Manager_${pkgver}_amd64.deb"
    
      14)
    
      15
    
      16sha256sums=('23584354aee549d098392315810d67e5fd7fece9f8f2ad5b1058c1e6cd2e5aad')
    
      17
    
      18package() {
    
      19    bsdtar -xOf "${srcdir}/Openfoot.Manager_${pkgver}_amd64.deb" data.tar.gz \
    
      20        | bsdtar -xpf - -C "${pkgdir}"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 12:02:18	Low	2