oxiroute-bin

maintainer brauliobo · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for AUR packages; the low severity is due to the binary nature and unverifiable checksum source, but it comes from the legitimate project owner's release page.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal practice for AUR packages; the low severity is due to the binary nature and unverifiable checksum source, but it comes from the legitimate project owner's release page.

PKGBUILD

      1# Maintainer: OxiRoute maintainers <https://github.com/oxiroute/oxiroute/issues>
    
      2
    
      3pkgname=oxiroute-bin
    
      4pkgver=0.5.1
    
      5pkgrel=1
    
      6pkgdesc='Pingora-based HTTP, TCP, and RTMP proxy runtime (prebuilt binary)'
    
      7arch=('x86_64')
    
      8url='https://github.com/brauliobo/oxiroute'
    
      9license=('Apache-2.0')
    
      10depends=('ca-certificates' 'gcc-libs' 'glibc' 'openssl')
    
      11optdepends=('certbot: provide certificate lineages consumed by configured Certbot sources')
    
      12provides=("oxiroute=${pkgver}")
    
      13conflicts=('oxiroute')
    
      14backup=('etc/oxiroute/oxiroute.env'
    
      15        'etc/oxiroute/oxiroute.kdl'
    
      16        'etc/oxiroute/oxiroute.lua')
    
      17install=oxiroute.install
    
      18options=('!strip')
    
      19_archive="oxiroute-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst"
    
      20source=("${_archive}::${url}/releases/download/v${pkgver}/${_archive}")
    
      21noextract=("${_archive}")
    
      22sha256sums=('7c236fe6ca92fd3ee73532a031f073a58852eb4ef0c539e3b79e449f8325f614')
    
      23
    
      24package() {
    
      25  bsdtar -xpf "${srcdir}/${_archive}" -C "${pkgdir}" \
    
      26    --exclude='.BUILDINFO' \
    
      27    --exclude='.INSTALL' \
    
      28    --exclude='.MTREE' \
    
      29    --exclude='.PKGINFO'
    
      30}
    
      31

Changes since previous scan

--- PKGBUILD @ 2026-08-12 00:27
+++ PKGBUILD @ 2026-08-18 00:03
@@ -1,7 +1,7 @@
 # Maintainer: OxiRoute maintainers <https://github.com/oxiroute/oxiroute/issues>
 
 pkgname=oxiroute-bin
-pkgver=0.5.0
+pkgver=0.5.1
 pkgrel=1
 pkgdesc='Pingora-based HTTP, TCP, and RTMP proxy runtime (prebuilt binary)'
 arch=('x86_64')
@@ -19,7 +19,7 @@
 _archive="oxiroute-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst"
 source=("${_archive}::${url}/releases/download/v${pkgver}/${_archive}")
 noextract=("${_archive}")
-sha256sums=('837b79316d1d81c8faa1fdd1f7f5727e3e722d152983d27252c5a734bd37529c')
+sha256sums=('7c236fe6ca92fd3ee73532a031f073a58852eb4ef0c539e3b79e449f8325f614')
 
 package() {
   bsdtar -xpf "${srcdir}/${_archive}" -C "${pkgdir}" \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 09:32:18	LOW	2
2026-08-12 00:27:08	CLEAN	2
2026-08-11 17:21:34	LOW	1
2026-08-11 13:21:13	LOW	1