plasma6-runners-markdown-bookmarks-git
The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate KRunner plugin source with no evidence of malicious behavior; the low severity reflects the unverifiable source and low AUR popularity, not active danger.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, but it is a legitimate KRunner plugin source with no evidence of malicious behavior; the low severity reflects the unverifiable source and low AUR popularity, not active danger.
PKGBUILD
# Maintainer: Andrew Rabert <ar@nullsum.net>
pkgname=plasma6-runners-markdown-bookmarks-git
pkgver=0.5.1.r6.g625d5d5
pkgrel=1
pkgdesc="A Krunner plugin to open web links listed in a Markdown file"
arch=('x86_64')
url=https://github.com/andrewrabert/krunner-markdown-bookmarks
license=('GPL-3.0-only')
depends=(krunner yaml-cpp)
makedepends=(cmake extra-cmake-modules git ninja kcmutils)
provides=(plasma6-runners-markdown-bookmarks)
conflicts=(plasma6-runners-markdown-bookmarks)
source=("git+${url}.git")
sha256sums=('SKIP')
install=plasma6-runners-markdown-bookmarks-git.install
pkgver() {
cd krunner-markdown-bookmarks
git describe --long --tags | sed 's/\([^-]*-g\)/r\1/;s/-/./g'
}
build() {
cmake \
-B build \
-G Ninja \
-S krunner-markdown-bookmarks \
-Wno-dev \
-DCMAKE_SKIP_RPATH=YES \
-DCMAKE_BUILD_TYPE=None
cmake --build build
}
package() {
DESTDIR="$pkgdir" cmake --install build
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-25 05:41:54 | Low | 2 |