realer-xpad-bin

LOW

maintainer giosuel 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package installs a prebuilt binary from GitHub releases, which is normal for AUR packages; the source is from the project's official repository, and the binary is not executed remotely or built from an untrusted host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package installs a prebuilt binary from GitHub releases, which is normal for AUR packages; the source is from the project's official repository, and the binary is not executed remotely or built from an untrusted host.

PKGBUILD

      1# Maintainer: giosuel <me@giosuel.ch>
    
      2pkgname=realer-xpad-bin
    
      3_pkgname=realer-xpad
    
      4pkgver=0.1.6
    
      5pkgrel=1
    
      6pkgdesc='Sticky notes with Markdown and drawing, native on Wayland and Hyprland (prebuilt binary)'
    
      7arch=('x86_64')
    
      8url='https://github.com/giosuel/realer-xpad'
    
      9license=('AGPL-3.0-only')
    
      10depends=('cairo' 'glib2' 'glibc' 'gtk4' 'hicolor-icon-theme' 'libadwaita' 'libgcc' 'pango')
    
      11provides=("$_pkgname=$pkgver")
    
      12conflicts=("$_pkgname")
    
      13options=('!debug') # the release binary is already stripped
    
      14source_x86_64=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-$CARCH-linux.tar.gz")
    
      15sha256sums_x86_64=('b48ac9104aef0d1a815c758ca94b4a7b330d883626f8ea7a514f82c963f382d9')
    
      16
    
      17package() {
    
      18  cd "$_pkgname-$pkgver-$CARCH-linux"
    
      19  install -Dm755 realer-xpad -t "$pkgdir/usr/bin"
    
      20  install -Dm644 extras/ch.giosuel.RealerXpad.desktop -t "$pkgdir/usr/share/applications"
    
      21  install -Dm644 extras/ch.giosuel.RealerXpad.metainfo.xml -t "$pkgdir/usr/share/metainfo"
    
      22  install -Dm644 data/icons/hicolor/scalable/apps/ch.giosuel.RealerXpad.svg \
    
      23    -t "$pkgdir/usr/share/icons/hicolor/scalable/apps"
    
      24  install -Dm644 README.md extras/hyprland.conf extras/hyprland.lua -t "$pkgdir/usr/share/doc/$_pkgname"
    
      25}
    
      26

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
 # Maintainer: giosuel <me@giosuel.ch>
 pkgname=realer-xpad-bin
 _pkgname=realer-xpad
-pkgver=0.1.5
+pkgver=0.1.6
 pkgrel=1
 pkgdesc='Sticky notes with Markdown and drawing, native on Wayland and Hyprland (prebuilt binary)'
 arch=('x86_64')
@@ -12,7 +12,7 @@
 conflicts=("$_pkgname")
 options=('!debug') # the release binary is already stripped
 source_x86_64=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-$CARCH-linux.tar.gz")
-sha256sums_x86_64=('6c1f7ecf5638ce262e3bfe5213153fbd1818c8e16255708f42ec7f09c6e53f76')
+sha256sums_x86_64=('b48ac9104aef0d1a815c758ca94b4a7b330d883626f8ea7a514f82c963f382d9')
 
 package() {
   cd "$_pkgname-$pkgver-$CARCH-linux"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 21:16:13	Low	2
2026-10-16 17:16:11	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 23:15:20	Low	2
2026-10-12 19:14:29	Low	2
2026-10-12 17:14:20	Low	2
2026-10-12 13:13:52	Medium	2
2026-10-12 11:13:20	Medium	2