paru-wrapper

LOW

maintainer Vikyek 0 votes scanned 2026-08-25 05:25:49.966969

View on AUR

Why flagged

The package installs two local scripts and creates a user-specific symlink in /home/v, which is non-standard but not malicious; the hardcoded path suggests poor packaging, not active harm.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs two local scripts and creates a user-specific symlink in /home/v, which is non-standard but not malicious; the hardcoded path suggests poor packaging, not active harm.

PKGBUILD

      1pkgname=paru-wrapper
    
      2pkgver=1.0.0
    
      3pkgrel=4
    
      4pkgdesc="A wrapper around paru that implements dependency-aware orphan cleaning and automatic local repository DB updates"
    
      5arch=('any')
    
      6url="https://github.com/Vikyek/paru-wrapper"
    
      7license=('GPL')
    
      8depends=('paru' 'bash' 'sudo')
    
      9install=paru-wrapper.install
    
      10source=(
    
      11    "paru-wrapper"
    
      12    "update_mkvpkg_aur.py"
    
      13)
    
      14sha256sums=('b677fa3cbf8acebd428bc7de21c53b2d7f0cdc568c50006d45e4f2373c30a2a9'
    
      15            'a83f6524575cc1ed34e5fa9aabfbb0279cffe67f7c4c7ee098f06b23eb982479')
    
      16
    
      17package() {
    
      18    # Install paru wrapper
    
      19    install -Dm755 "${srcdir}/paru-wrapper" "${pkgdir}/usr/bin/paru-wrapper"
    
      20    install -Dm755 "${srcdir}/update_mkvpkg_aur.py" "${pkgdir}/usr/bin/update_mkvpkg_aur.py"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-25 05:25:49	Low	2