paxman

LOW
maintainer den23513 0 votes scanned 2026-09-26 17:15:25.581789
View on AUR
Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it is from the project's official repository and the checksum is provided, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it is from the project's official repository and the checksum is provided, reducing risk.

PKGBUILD

1pkgname=paxman
2pkgver=0.1.0
3pkgrel=1
4pkgdesc="A modern and fast package manager for Arch-based systems"
5arch=('x86_64')
6url='https://github.com/denix666/pax'
7license=('MIT')
8provides=('pax')
9conflicts=('pax')
10optdepends=(
11 'bash-completion: bash shell completions'
12 'zsh: zsh shell completions'
13 'fish: fish shell completions'
14)
15
16source=("https://github.com/denix666/pax/releases/download/v${pkgver}/pax_linux_x86_64.tar.gz")
17
18package() {
19 install -Dm755 "${srcdir}/pax" "${pkgdir}/usr/bin/pax"
20
21 "${srcdir}/pax" --completions bash |
22 install -Dm644 /dev/stdin "${pkgdir}/usr/share/bash-completion/completions/pax"
23
24 "${srcdir}/pax" --completions zsh |
25 install -Dm644 /dev/stdin "${pkgdir}/usr/share/zsh/site-functions/_pax"
26
27 "${srcdir}/pax" --completions fish |
28 install -Dm644 /dev/stdin "${pkgdir}/usr/share/fish/vendor_completions.d/pax.fish"
29}
30sha256sums=('c70b379286798819fbd8f21ed989b96dafec2509c4751d5a5deec8beee3a495b')
31

Scan history

Scanned at (UTC)SeverityRules
2026-09-26 17:15:25 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion