pemdash
LOW
maintainer modinfo
0 votes
scanned 2026-08-19 05:41:16.641961
Why flagged
Package downloads prebuilt binaries from GitHub releases; while the source is not built locally, the binaries are from the project's official repository with verifiable checksums, reducing risk.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package downloads prebuilt binaries from GitHub releases; while the source is not built locally, the binaries are from the project's official repository with verifiable checksums, reducing risk.
PKGBUILD
1
# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
2
pkgname=pemdash
3
pkgver=0.1.1
4
pkgrel=1
5
pkgdesc="Fast GTK calculator overlay with proper operator precedence"
6
arch=('x86_64' 'aarch64')
7
url="https://github.com/skorotkiewicz/pemdash"
8
license=('MIT')
9
depends=('gcc-libs' 'gtk4')
10
makedepends=()
11
options=(!strip)
12
13
source_x86_64=("$pkgname-$pkgver-$pkgrel-x86_64.tar.gz::$url/releases/download/v$pkgver/pemdash-v$pkgver-x86_64-unknown-linux-gnu.tar.gz")
14
source_aarch64=("$pkgname-$pkgver-$pkgrel-aarch64.tar.gz::$url/releases/download/v$pkgver/pemdash-v$pkgver-aarch64-unknown-linux-gnu.tar.gz")
15
16
sha256sums_x86_64=('a5b64068f5b44123abff8c8e27f482cc9e547ebe49c7c581e77cb84955d75f1e')
17
sha256sums_aarch64=('e0aeb154db23949b2c8dab5950d531febb28ae74f4eb3b632fd91ff3670b4d6c')
18
19
package() {
20
install -Dm755 pemdash "$pkgdir/usr/bin/pemdash"
21
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
22
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
23
}
24
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-19 05:41:16 | Low | 2 |