pandacode

LOW

maintainer satriani 0 votes scanned 2026-10-27 00:23:28.674093

View on AUR

Why flagged

The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; the source is verifiable via checksum and hosted on a trusted platform, so the risk is low despite the AppImage being a binary blob.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and installed; the source is verifiable via checksum and hosted on a trusted platform, so the risk is low despite the AppImage being a binary blob.

PKGBUILD

      1# Maintainer: Alex S. <shantanna_at_hotmail_dot_com>
    
      2
    
      3pkgname=pandacode
    
      4pkgver=0.3.56
    
      5pkgrel=1
    
      6pkgdesc="Lightweight coding agent workspace"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://github.com/aicodeking/pandacode"
    
      9license=('custom')
    
      10options=(!strip)
    
      11_appimage="PandaCode-Linux-${CARCH}.AppImage"
    
      12
    
      13source_x86_64=("PandaCode-Linux-x86_64.AppImage::https://github.com/aicodeking/pandacode/releases/download/v${pkgver}/PandaCode-Linux-x86_64.AppImage")
    
      14source_aarch64=("PandaCode-Linux-aarch64.AppImage::https://github.com/aicodeking/pandacode/releases/download/v${pkgver}/PandaCode-Linux-aarch64.AppImage")
    
      15sha256sums_x86_64=('d99bc42c2c64bdb0bd18ad9f27b4365f502ab8fdc7e4eb00911e7b9e782b8273')
    
      16sha256sums_aarch64=('8e27bfa3c49387ea72752cd0fc0e5ae9db2929cb167b7c294cc652f171a101be')
    
      17
    
      18prepare() {
    
      19  cd "${srcdir}"
    
      20  chmod +x "${_appimage}"
    
      21  "./${_appimage}" --appimage-extract >/dev/null 2>&1
    
      22}
    
      23
    
      24package() {
    
      25  cd "${srcdir}"
    
      26  install -d "${pkgdir}/opt/${pkgname}"
    
      27  cp -a squashfs-root/. "${pkgdir}/opt/${pkgname}/"
    
      28
    
      29  install -d "${pkgdir}/usr/bin"
    
      30  ln -s "/opt/${pkgname}/AppRun" "${pkgdir}/usr/bin/pandacode"
    
      31
    
      32  install -Dm644 squashfs-root/PandaCode.desktop \
    
      33    "${pkgdir}/usr/share/applications/pandacode.desktop"
    
      34
    
      35  # icons
    
      36  if [[ -d squashfs-root/usr/share/icons ]]; then
    
      37    cp -a squashfs-root/usr/share/icons/. "${pkgdir}/usr/share/icons/"
    
      38  fi
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 00:23:28	Low	2
2026-10-26 21:45:59	Low	2