pgbot-bin
The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary not being built from source, but it comes from a trusted project host with verifiable checksum.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary not being built from source, but it comes from a trusted project host with verifiable checksum.
PKGBUILD
# Maintainer: tmtaxman <tmtaxman2 at gmail dot com>
pkgname=pgbot-bin
_pkgbin=pgbot
pkgver=0.4.3
pkgrel=1
pkgdesc="Postgres intelligence for ai agents & apps"
arch=('x86_64')
url="https://github.com/pgrundev/pgbot"
license=('Apache-2.0')
provides=('pgbot')
conflicts=('pgbot')
options=('!strip' '!debug')
source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/${_pkgbin}_${pkgver}_linux_amd64.tar.gz")
sha256sums=('eb7ea6794bdb577106b5b1c59a55b3439d47000503e1828785d8ed2e7fb1729d')
package() {
cd "$srcdir"
install -Dm755 "$_pkgbin" -t "$pkgdir/usr/bin/"
install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
install -Dm644 README.md -t "$pkgdir/usr/share/doc/$pkgname/"
"$_pkgbin" completion bash >"$_pkgbin".bash
"$_pkgbin" completion zsh >_"$_pkgbin"
"$_pkgbin" completion fish >"$_pkgbin".fish
install -Dm644 "${_pkgbin}.bash" "$pkgdir/usr/share/bash-completion/completions/$_pkgbin"
install -Dm644 "_${_pkgbin}" "$pkgdir/usr/share/zsh/site-functions/_$_pkgbin"
install -Dm644 "${_pkgbin}.fish" "$pkgdir/usr/share/fish/vendor_completions.d/$_pkgbin.fish"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-22 17:18:20 | Low | 2 |