redumper-bin

LOW
maintainer orphaned 0 votes scanned 2026-09-12 19:12:35.548512
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a supply-chain risk if the host is compromised, but no obfuscated or malicious behavior is present; the source is verifiable and the binary is from the project's own release infrastructure.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a supply-chain risk if the host is compromised, but no obfuscated or malicious behavior is present; the source is verifiable and the binary is from the project's own release infrastructure.

PKGBUILD

1# Maintainer: jswagner <jason-at-jason;s.wagner*dot,com>
2_prgname=redumper
3pkgname=redumper-bin
4url="https://github.com/superg/redumper"
5arch=('x86_64')
6conflicts=('redumper')
7pkgdesc="Low level CD dumper utility"
8provides=('redumper')
9pkgver=b732
10pkgrel=1
11_pkgfilename="redumper-b732-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :(
12license=('GPL3')
13source=('https://github.com/superg/redumper/releases/download/b732/redumper-b732-linux-x64.zip'
14'https://raw.githubusercontent.com/superg/redumper/main/README.md'
15'https://raw.githubusercontent.com/superg/redumper/main/LICENSE')
16sha256sums=('687a6ddef45092397aab6243ea854742033de722e28064896f651487a77ba1ee'
17'SKIP'
18'SKIP')
19
20package() {
21
22 # install binary
23 install -Dm 755 ${srcdir}/${_pkgfilename}/bin/redumper ${pkgdir}/usr/bin/${_prgname}
24
25 # install documentation
26 install -Dm 644 ${srcdir}/README.md ${pkgdir}/usr/local/share/doc/${_prgname}/README.md
27
28 # install license
29 install -Dm 644 ${srcdir}/LICENSE ${pkgdir}/usr/share/licenses/${_prgname}/LICENSE
30
31}
32

Changes since previous scan

--- PKGBUILD @ 2026-07-08 05:27
+++ PKGBUILD @ 2026-09-12 19:12
@@ -3,16 +3,17 @@
pkgname=redumper-bin
url="https://github.com/superg/redumper"
arch=('x86_64')
+conflicts=('redumper')
pkgdesc="Low level CD dumper utility"
provides=('redumper')
-pkgver=b683
+pkgver=b732
pkgrel=1
-_pkgfilename="redumper-b683-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :(
+_pkgfilename="redumper-b732-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :(
license=('GPL3')
-source=('https://github.com/superg/redumper/releases/download/b683/redumper-b683-linux-x64.zip'
+source=('https://github.com/superg/redumper/releases/download/b732/redumper-b732-linux-x64.zip'
'https://raw.githubusercontent.com/superg/redumper/main/README.md'
'https://raw.githubusercontent.com/superg/redumper/main/LICENSE')
-sha256sums=('13bfb9475424b54b2ffb1dfc2f8d738911912815282d9d93ea07926eb12c36bb'
+sha256sums=('687a6ddef45092397aab6243ea854742033de722e28064896f651487a77ba1ee'
'SKIP'
'SKIP')

Scan history

Scanned at (UTC)SeverityRules
2026-09-12 19:12:35 Low 2
2026-08-12 01:22:13 Clean 0
2026-07-08 05:27:13 Clean 0
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion