plasticity-bin-unstable

LOW

maintainer M0N7Y5 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt .deb from the project's official GitHub releases, which is normal for AUR binary packages; the source is verifiable and matches the project's official distribution, despite the 'recently orphaned' flag.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the project's official GitHub releases, which is normal for AUR binary packages; the source is verifiable and matches the project's official distribution, despite the 'recently orphaned' flag.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Albert Latham <me@albertlatham.com>
    
      2
    
      3pkgname="plasticity-bin-unstable"
    
      4pkgver="24.2.5"
    
      5pkgrel="1"
    
      6pkgdesc="Plasticity is a 3D modeling software for concept artists. Modeling in Plasticity is quick and efficient due to the unique gizmos, shortcuts, and thoughtful workflow."
    
      7arch=("x86_64")
    
      8license=("nonfree")
    
      9url='https://github.com/nkallen/plasticity'
    
      10depends=(alsa-lib at-spi2-atk at-spi2-core atk cairo dbus desktop-file-utils expat gdk-pixbuf2 glib2 gtk3 gvfs
    
      11         hicolor-icon-theme kde-cli-tools libcups libdrm libnotify libx11 libxcb libxcomposite libxdamage libxext
    
      12         libxfixes libxkbcommon libxrandr libxtst mesa nspr nss pango trash-cli xdg-utils)
    
      13optdepends=('discord: For communication with the devs'
    
      14            'apparmor: Extra protection'
    
      15            'pulseaudio: For sound')
    
      16source=("https://github.com/nkallen/plasticity/releases/download/v${pkgver}/plasticity_${pkgver}_amd64.deb")
    
      17sha512sums=('82209a7aeaaf5e1a23bd41b1d4e3795ec9be7e5a430aebd08400229a609ba405eab416cd869cba5b727171a00c73fe6ea156c95b73f06d903b7650053c312b2e')
    
      18
    
      19package() {
    
      20    tar -xvf data.tar.zst -C "$pkgdir"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-11 00:16:25	Medium	1
2026-06-18 16:11:54	Clean	0