pactience-bin

maintainer a77ila · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt binary from the project's own GitHub releases, which is a common and generally safe practice; the low severity is due to the unverifiable nature of prebuilt binaries, but the source is from a legitimate project host.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs a prebuilt binary from the project's own GitHub releases, which is a common and generally safe practice; the low severity is due to the unverifiable nature of prebuilt binaries, but the source is from a legitimate project host.

PKGBUILD

      1# Maintainer: a77ila
    
      2pkgname=pactience-bin
    
      3pkgver=0.1.3
    
      4pkgrel=1
    
      5pkgdesc="Enforce a minimum package age before upgrading Arch Linux packages (pacman/AUR) (prebuilt)"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/a77ila/pactience"
    
      8license=('MIT' 'Apache-2.0')
    
      9depends=('pacman' 'gcc-libs' 'zlib')
    
      10optdepends=(
    
      11  'paru: AUR package support'
    
      12  'yay: AUR package support'
    
      13)
    
      14provides=('pactience')
    
      15conflicts=('pactience')
    
      16source_x86_64=("pactience-$pkgver-x86_64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/pactience-$pkgver-x86_64-unknown-linux-gnu.tar.gz")
    
      17source_aarch64=("pactience-$pkgver-aarch64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/pactience-$pkgver-aarch64-unknown-linux-gnu.tar.gz")
    
      18sha256sums_x86_64=('c44ac7cd3a770222b8bd26978b9ccc00a6a2de052fda0e9185067fba8c54bddb')
    
      19sha256sums_aarch64=('fe18856ad9c9861c04256ab43cf255d6402dba5bb2a1b68c92da31f0400e37bf')
    
      20
    
      21package() {
    
      22  install -Dm755 pactience "$pkgdir/usr/bin/pactience"
    
      23  install -Dm644 LICENSE-MIT "$pkgdir/usr/share/licenses/$pkgname/LICENSE-MIT"
    
      24  install -Dm644 LICENSE-APACHE "$pkgdir/usr/share/licenses/$pkgname/LICENSE-APACHE"
    
      25}
    
      26

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 # Maintainer: a77ila
 pkgname=pactience-bin
-pkgver=0.1.2
+pkgver=0.1.3
 pkgrel=1
 pkgdesc="Enforce a minimum package age before upgrading Arch Linux packages (pacman/AUR) (prebuilt)"
 arch=('x86_64' 'aarch64')
@@ -15,8 +15,8 @@
 conflicts=('pactience')
 source_x86_64=("pactience-$pkgver-x86_64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/pactience-$pkgver-x86_64-unknown-linux-gnu.tar.gz")
 source_aarch64=("pactience-$pkgver-aarch64-unknown-linux-gnu.tar.gz::$url/releases/download/v$pkgver/pactience-$pkgver-aarch64-unknown-linux-gnu.tar.gz")
-sha256sums_x86_64=('32be33b6d077505a42e7b2aaaeb77f3e6a14f5cc26c365abe38e641023ec8a22')
-sha256sums_aarch64=('82ed726a32e4853db76a75cbebeac81520cb69d7ecfc86764724ac2e0687b3b7')
+sha256sums_x86_64=('c44ac7cd3a770222b8bd26978b9ccc00a6a2de052fda0e9185067fba8c54bddb')
+sha256sums_aarch64=('fe18856ad9c9861c04256ab43cf255d6402dba5bb2a1b68c92da31f0400e37bf')
 
 package() {
   install -Dm755 pactience "$pkgdir/usr/bin/pactience"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 23:26:18	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 23:22:13	LOW	2