openvpn-gui-linux-bin

MEDIUM

maintainer Kisuke-CZE 0 votes scanned 2026-10-25 13:42:47.056782

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release without source code availability, creating a supply-chain risk if the binary were malicious or compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary from a GitHub release without source code availability, creating a supply-chain risk if the binary were malicious or compromised.

PKGBUILD

      1# Maintainer: Kisuke <kisuke at tauren dot cz>
    
      2pkgname=openvpn-gui-linux-bin
    
      3_pkgname=openvpn-gui-linux
    
      4pkgver=0.1.3
    
      5pkgrel=1
    
      6pkgdesc='A simple Linux GUI for OpenVPN'
    
      7arch=('x86_64')
    
      8url='https://github.com/DenysFizer/openvpn-gui-linux'
    
      9license=('MIT')
    
      10provides=('openvpn-gui-linux')
    
      11depends=('openvpn')
    
      12source=("https://github.com/DenysFizer/${_pkgname}/releases/download/v${pkgver}/${_pkgname}_${pkgver}_amd64.deb")
    
      13sha256sums=('a174b9b368f7899f901d12adad5db3f26d96faa8cf8750f42ec210c2a82600c7')
    
      14
    
      15package() {
    
      16    
    
      17    bsdtar -xf data.tar.xz -C "$pkgdir/"
    
      18
    
      19}
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 13:42:47	Medium	2