pkger-bin

LOW

maintainer almezali 1 votes scanned 2026-08-29 13:39:41.976942

View on AUR

Why flagged

The package installs prebuilt binaries from a non-whitelisted but plausibly project-owned GitLab host; while the source is not built locally and checksums are provided, the risk is limited to supply-chain trust in the uploader, not active malice.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from a non-whitelisted but plausibly project-owned GitLab host; while the source is not built locally and checksums are provided, the risk is limited to supply-chain trust in the uploader, not active malice.

PKGBUILD

      1# Maintainer: Mahmoud Almezali
    
      2
    
      3pkgname=pkger-bin
    
      4pkgver=1.2.2
    
      5pkgrel=1
    
      6pkgdesc='Package manager for Arch Linux and Arch-based distributions'
    
      7arch=('x86_64')
    
      8url='https://github.com/almezali/pkger-g'
    
      9license=('MIT')
    
      10depends=('gtk4')
    
      11optdepends=('yay: AUR package support' 'paru: AUR package support' 'flatpak: Flatpak package support')
    
      12provides=('pkger')
    
      13conflicts=('pkger')
    
      14
    
      15_source_url='https://gitlab.com/package-installer-gui/pkger/-/raw/main/pkger.tar.xz'
    
      16source=("pkger.tar.xz::${_source_url}")
    
      17sha256sums=('a03d35ad7299a36d7c58dc7b4ac5807a10ddd0f2731f929c19e4d05afcdac45c')
    
      18
    
      19prepare() {
    
      20    cd "$srcdir"
    
      21
    
      22    # The upstream archive contains these files at its root.
    
      23    for required in pkger pkger.desktop pkger.png README.txt; do
    
      24        if [[ ! -e "$required" ]]; then
    
      25            printf 'Error: required file is missing from the archive: %s\n' "$required" >&2
    
      26            return 1
    
      27        fi
    
      28    done
    
      29
    
      30    chmod 755 pkger
    
      31    chmod 644 pkger.desktop pkger.png README.txt
    
      32}
    
      33
    
      34package() {
    
      35    cd "$srcdir"
    
      36
    
      37    install -Dm755 pkger "$pkgdir/usr/bin/pkger"
    
      38    install -Dm644 pkger.desktop "$pkgdir/usr/share/applications/pkger.desktop"
    
      39    install -Dm644 pkger.png "$pkgdir/usr/share/pixmaps/pkger.png"
    
      40    install -Dm644 README.txt "$pkgdir/usr/share/doc/pkger/README.txt"
    
      41}
    
      42
    
      43# vim:set ts=4 sw=4 et:
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-29 13:39:41	Low	2