pcl-n-beta-bin

MEDIUM

maintainer willker 0 votes scanned 2026-08-20 09:10:51.385725

View on AUR

Why flagged

The package installs a prebuilt binary (deb) from a GitHub release without source code availability or reproducible build, creating a supply-chain risk if the release asset were compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt binary (deb) from a GitHub release without source code availability or reproducible build, creating a supply-chain risk if the release asset were compromised.

PKGBUILD

      1# Maintainer: willker <wz[dot]willker[at]gmail[dot]com>
    
      2
    
      3pkgname=pcl-n-beta-bin
    
      4pkgver=1.4.7
    
      5pkgrel=1
    
      6pkgdesc="一个基于 PCL-CE 开发的 Minecraft 启动器"
    
      7arch=('x86_64')
    
      8url="https://github.com/PCL-N-Edition/PCL-N"
    
      9license=('Apache-2.0')
    
      10depends=('dotnet-runtime-10.0' 'hicolor-icon-theme' 'fontconfig')
    
      11conflicts=('pcl-n' 'pcl-n-bin')
    
      12source=("$url/releases/download/v$pkgver-beta/PCL_N_Beta_linux-x64_NoRuntime_installer.deb")
    
      13sha256sums=('028845290581b821484e495f73f7a396b6c2682e88ff38d5bb0adf8d55c05301')
    
      14options=('!strip')
    
      15
    
      16package() {
    
      17  cd "$srcdir"
    
      18  tar -xf data.tar.zst -C "$pkgdir"
    
      19}
    
      20

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 09:10:51	Medium	2