rayfish
The package installs prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the source is verifiable and matches the project's own infrastructure, with provided checksums, making it a low-risk supply-chain scenario.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases; while the host is not whitelisted, the source is verifiable and matches the project's own infrastructure, with provided checksums, making it a low-risk supply-chain scenario.
PKGBUILD
# Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com>
pkgname=rayfish
pkgver=0.4.1
pkgrel=1
pkgdesc="P2P mesh VPN powered by iroh"
arch=('x86_64' 'aarch64')
url="https://github.com/rayfish/rayfish"
license=('MPL-2.0')
depends=('gcc-libs')
options=(!strip)
source_x86_64=("ray-linux-x86_64-$pkgver::$url/releases/download/v$pkgver/ray-linux-x86_64")
source_aarch64=("ray-linux-aarch64-$pkgver::$url/releases/download/v$pkgver/ray-linux-aarch64")
sha256sums_x86_64=('fc2099c8edf6b1f4b93982e0ee0145215ed81d776850b5c5ddfde04311e1a23c')
sha256sums_aarch64=('dd9aec4355f279d383467fd3ccdc40534ac89b9413a8b5318d83e8c1e2769adc')
package() {
install -Dm755 "$srcdir/ray-linux-$CARCH-$pkgver" "$pkgdir/usr/bin/ray"
}
Changes since previous scan
--- PKGBUILD @ 2026-08-27 07:31+++ PKGBUILD @ 2026-09-02 03:49@@ -1,6 +1,6 @@ # Maintainer: Sebastian Korotkiewicz <skorotkiewicz@gmail.com> pkgname=rayfish-pkgver=0.4.0+pkgver=0.4.1 pkgrel=1 pkgdesc="P2P mesh VPN powered by iroh" arch=('x86_64' 'aarch64')@@ -12,8 +12,8 @@ source_x86_64=("ray-linux-x86_64-$pkgver::$url/releases/download/v$pkgver/ray-linux-x86_64") source_aarch64=("ray-linux-aarch64-$pkgver::$url/releases/download/v$pkgver/ray-linux-aarch64") -sha256sums_x86_64=('10b7a2f748bc0d28c6ef4c8df56eb40b0e43e2080ba7177cab87b50274dbf476')-sha256sums_aarch64=('48c372c0af0dba6ebce2b66a6a30eec55ef9db7f96f91561ab67612c0e1f8956')+sha256sums_x86_64=('fc2099c8edf6b1f4b93982e0ee0145215ed81d776850b5c5ddfde04311e1a23c')+sha256sums_aarch64=('dd9aec4355f279d383467fd3ccdc40534ac89b9413a8b5318d83e8c1e2769adc') package() { install -Dm755 "$srcdir/ray-linux-$CARCH-$pkgver" "$pkgdir/usr/bin/ray"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-02 03:49:31 | Low | 2 |
| 2026-08-27 07:31:53 | Clean | 0 |
| 2026-08-16 01:31:50 | Clean | 0 |
| 2026-07-25 03:28:44 | Clean | 0 |
| 2026-07-21 00:24:15 | Clean | 0 |
| 2026-07-20 00:19:49 | Low | 2 |
| 2026-07-19 00:17:08 | Low | 2 |
| 2026-07-18 00:14:48 | Low | 2 |
| 2026-07-17 00:06:16 | Low | 2 |
| 2026-07-16 00:05:41 | Low | 2 |
| 2026-07-15 00:09:25 | Low | 2 |
| 2026-07-14 00:09:48 | Low | 2 |
| 2026-07-13 00:19:36 | Low | 2 |
| 2026-07-12 00:27:26 | Low | 2 |
| 2026-07-11 00:25:18 | Low | 2 |
| 2026-07-10 00:20:30 | Low | 2 |
| 2026-07-09 00:22:38 | Low | 2 |
| 2026-07-08 03:27:03 | Low | 2 |
| 2026-07-07 00:22:52 | Clean | 2 |
| 2026-07-06 13:21:03 | Low | 1 |