rayfish

LOW
maintainer modinfo 0 votes scanned 2026-09-02 03:49:31.775712
View on AUR
Why flagged

The package installs prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the source is verifiable and matches the project's own infrastructure, with provided checksums, making it a low-risk supply-chain scenario.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the source is verifiable and matches the project's own infrastructure, with provided checksums, making it a low-risk supply-chain scenario.

PKGBUILD

1# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
2pkgname=rayfish
3pkgver=0.4.1
4pkgrel=1
5pkgdesc="P2P mesh VPN powered by iroh"
6arch=('x86_64' 'aarch64')
7url="https://github.com/rayfish/rayfish"
8license=('MPL-2.0')
9depends=('gcc-libs')
10options=(!strip)
11
12source_x86_64=("ray-linux-x86_64-$pkgver::$url/releases/download/v$pkgver/ray-linux-x86_64")
13source_aarch64=("ray-linux-aarch64-$pkgver::$url/releases/download/v$pkgver/ray-linux-aarch64")
14
15sha256sums_x86_64=('fc2099c8edf6b1f4b93982e0ee0145215ed81d776850b5c5ddfde04311e1a23c')
16sha256sums_aarch64=('dd9aec4355f279d383467fd3ccdc40534ac89b9413a8b5318d83e8c1e2769adc')
17
18package() {
19 install -Dm755 "$srcdir/ray-linux-$CARCH-$pkgver" "$pkgdir/usr/bin/ray"
20}
21

Changes since previous scan

--- PKGBUILD @ 2026-08-27 07:31
+++ PKGBUILD @ 2026-09-02 03:49
@@ -1,6 +1,6 @@
# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
pkgname=rayfish
-pkgver=0.4.0
+pkgver=0.4.1
pkgrel=1
pkgdesc="P2P mesh VPN powered by iroh"
arch=('x86_64' 'aarch64')
@@ -12,8 +12,8 @@
source_x86_64=("ray-linux-x86_64-$pkgver::$url/releases/download/v$pkgver/ray-linux-x86_64")
source_aarch64=("ray-linux-aarch64-$pkgver::$url/releases/download/v$pkgver/ray-linux-aarch64")
-sha256sums_x86_64=('10b7a2f748bc0d28c6ef4c8df56eb40b0e43e2080ba7177cab87b50274dbf476')
-sha256sums_aarch64=('48c372c0af0dba6ebce2b66a6a30eec55ef9db7f96f91561ab67612c0e1f8956')
+sha256sums_x86_64=('fc2099c8edf6b1f4b93982e0ee0145215ed81d776850b5c5ddfde04311e1a23c')
+sha256sums_aarch64=('dd9aec4355f279d383467fd3ccdc40534ac89b9413a8b5318d83e8c1e2769adc')
package() {
install -Dm755 "$srcdir/ray-linux-$CARCH-$pkgver" "$pkgdir/usr/bin/ray"

Scan history

Scanned at (UTC)SeverityRules
2026-09-02 03:49:31 Low 2
2026-08-27 07:31:53 Clean 0
2026-08-16 01:31:50 Clean 0
2026-07-25 03:28:44 Clean 0
2026-07-21 00:24:15 Clean 0
2026-07-20 00:19:49 Low 2
2026-07-19 00:17:08 Low 2
2026-07-18 00:14:48 Low 2
2026-07-17 00:06:16 Low 2
2026-07-16 00:05:41 Low 2
2026-07-15 00:09:25 Low 2
2026-07-14 00:09:48 Low 2
2026-07-13 00:19:36 Low 2
2026-07-12 00:27:26 Low 2
2026-07-11 00:25:18 Low 2
2026-07-10 00:20:30 Low 2
2026-07-09 00:22:38 Low 2
2026-07-08 03:27:03 Low 2
2026-07-07 00:22:52 Clean 2
2026-07-06 13:21:03 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion