orbit-tui-bin
The package downloads a prebuilt binary from a GitHub release, which is a common and generally acceptable practice; while the host is not whitelisted, it is a legitimate project release on the maintainer's own repository, and the binary is installed directly without obfuscation or additional runtime behavior.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common and generally acceptable practice; while the host is not whitelisted, it is a legitimate project release on the maintainer's own repository, and the binary is installed directly without obfuscation or additional runtime behavior.
PKGBUILD
# Maintainer: zius <noelyt101@gmail.com>
pkgname=orbit-tui-bin
pkgver=0.11.17
pkgrel=1
pkgdesc="Extensible 24/7 terminal workspace and autonomous AI agent cockpit in Rust"
arch=('x86_64')
url="https://orbit-tui.vercel.app"
license=('MIT')
provides=('orbit' 'orbit-tui')
conflicts=('orbit' 'orbit-tui')
source_x86_64=("https://github.com/ziuus/orbit-tui/releases/download/v${pkgver}/orbit-x86_64-unknown-linux-gnu.tar.gz")
sha256sums_x86_64=('2611f97030415da38c17feb451fade5442315864752f8630a2991c0f93b354fc')
package() {
install -Dm755 "${srcdir}/orbit" "${pkgdir}/usr/bin/orbit"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-02 12:02:29 | Low | 2 |