quantydb-bin

LOW

maintainer Elchi 0 votes scanned 2026-09-08 03:15:31.911739

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the source is trustworthy and the binary is from the same project's CI, making the risk low despite the unverifiable checksum due to SKIP.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the source is trustworthy and the binary is from the same project's CI, making the risk low despite the unverifiable checksum due to SKIP.

PKGBUILD

      1# Maintainer: Elchi <github@elchi.dev>
    
      2#
    
      3# The released binary rather than a build from source. It is the same file
    
      4# the project tests on Linux in CI, and building it here would compile a
    
      5# database on a machine that has already been given one.
    
      6#
    
      7# The source-building package is `quantydb`. This is `quantydb-bin`.
    
      8#
    
      9# Version and checksum are written by the release workflow. Editing them
    
      10# by hand means editing them wrong.
    
      11pkgname=quantydb-bin
    
      12pkgver=0.4.0
    
      13pkgrel=1
    
      14pkgdesc="One database that reshapes itself into whatever you need"
    
      15arch=('x86_64')
    
      16url="https://github.com/QuantyRoot/QuantyDatabase"
    
      17license=('MIT')
    
      18provides=('quantydb')
    
      19conflicts=('quantydb')
    
      20# Nothing. Not a convention here, a measurement: the lock file holds this
    
      21# workspace and no other package.
    
      22depends=()
    
      23source=("quantydb-$pkgver::$url/releases/download/v$pkgver/quantydb-linux-x86_64"
    
      24        "LICENSE-$pkgver::$url/raw/v$pkgver/LICENSE")
    
      25sha256sums=('e1ba7d283b8add76d1eb38bff47b1c3a48cbd42c3566884842496ddf8ed0c282'
    
      26            'SKIP')
    
      27
    
      28package() {
    
      29    install -Dm755 "$srcdir/quantydb-$pkgver" "$pkgdir/usr/bin/quantydb"
    
      30    install -Dm644 "$srcdir/LICENSE-$pkgver" \
    
      31        "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 03:15:31	Low	2