oxideclaw-bin

LOW

maintainer yetipaw 0 votes scanned 2026-09-11 21:24:02.517890

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases with verifiable SHA-256 checksums; the low severity is due to the recent upload and few votes, not due to any malicious or unverifiable behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases with verifiable SHA-256 checksums; the low severity is due to the recent upload and few votes, not due to any malicious or unverifiable behavior.

PKGBUILD

      1# Maintainer: Alfredo Montesinos <alfredo@kubereva.com>
    
      2# Binary package: prebuilt release from GitHub, verified against the
    
      3# per-asset SHA-256 that the release workflow publishes.
    
      4pkgname=oxideclaw-bin
    
      5_pkgname=oxideclaw
    
      6pkgver=0.4.0
    
      7pkgrel=1
    
      8pkgdesc="Single-binary coding agent: zero-setup codebase index, cost-aware model routing, worktree agents, auto-fix loop, voice cloning. Claude, Ollama, OpenAI-compatible."
    
      9arch=('x86_64' 'aarch64')
    
      10url="https://github.com/ForkedInTime/OxideClaw"
    
      11license=('Apache-2.0')
    
      12provides=('oxideclaw')
    
      13options=('!strip' '!debug')
    
      14conflicts=('oxideclaw')
    
      15optdepends=('ollama: run local models offline'
    
      16            'bubblewrap: sandboxed shell execution'
    
      17            'firejail: alternative sandbox backend')
    
      18source_x86_64=("${_pkgname}-${pkgver}-x86_64::${url}/releases/download/v${pkgver}/oxideclaw-linux-x64")
    
      19source_aarch64=("${_pkgname}-${pkgver}-aarch64::${url}/releases/download/v${pkgver}/oxideclaw-linux-arm64")
    
      20sha256sums_x86_64=('b6cb388873f0b83ffa405cab7c14a36647c9488eb3009f8ab55e7ce346f87bd8')
    
      21sha256sums_aarch64=('c4f6d018c2f9c5244a0be6f70cf33a7027a29f4ca147adf8a4bd0fa0d2d65d1a')
    
      22noextract=("${_pkgname}-${pkgver}-x86_64" "${_pkgname}-${pkgver}-aarch64")
    
      23
    
      24package() {
    
      25  install -Dm755 "${srcdir}/${_pkgname}-${pkgver}-${CARCH}" "${pkgdir}/usr/bin/${_pkgname}"
    
      26  # Shell completions are generated by the (now executable) installed binary.
    
      27  local bin="${pkgdir}/usr/bin/${_pkgname}"
    
      28  install -dm755 "${pkgdir}/usr/share/bash-completion/completions" \
    
      29                 "${pkgdir}/usr/share/zsh/site-functions" \
    
      30                 "${pkgdir}/usr/share/fish/vendor_completions.d"
    
      31  "$bin" completions bash > "${pkgdir}/usr/share/bash-completion/completions/${_pkgname}"
    
      32  "$bin" completions zsh  > "${pkgdir}/usr/share/zsh/site-functions/_${_pkgname}"
    
      33  "$bin" completions fish > "${pkgdir}/usr/share/fish/vendor_completions.d/${_pkgname}.fish"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 21:24:02	Low	2