redumper-bin
The package downloads a prebuilt binary from the project's official GitHub releases, which is a supply-chain risk if the host is compromised, but no obfuscated or malicious behavior is present; the source is verifiable and the binary is from the project's own release infrastructure.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a supply-chain risk if the host is compromised, but no obfuscated or malicious behavior is present; the source is verifiable and the binary is from the project's own release infrastructure.
PKGBUILD
# Maintainer: jswagner <jason-at-jason;s.wagner*dot,com>
_prgname=redumper
pkgname=redumper-bin
url="https://github.com/superg/redumper"
arch=('x86_64')
conflicts=('redumper')
pkgdesc="Low level CD dumper utility"
provides=('redumper')
pkgver=b732
pkgrel=1
_pkgfilename="redumper-b732-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :(
license=('GPL3')
source=('https://github.com/superg/redumper/releases/download/b732/redumper-b732-linux-x64.zip'
'https://raw.githubusercontent.com/superg/redumper/main/README.md'
'https://raw.githubusercontent.com/superg/redumper/main/LICENSE')
sha256sums=('687a6ddef45092397aab6243ea854742033de722e28064896f651487a77ba1ee'
'SKIP'
'SKIP')
package() {
# install binary
install -Dm 755 ${srcdir}/${_pkgfilename}/bin/redumper ${pkgdir}/usr/bin/${_prgname}
# install documentation
install -Dm 644 ${srcdir}/README.md ${pkgdir}/usr/local/share/doc/${_prgname}/README.md
# install license
install -Dm 644 ${srcdir}/LICENSE ${pkgdir}/usr/share/licenses/${_prgname}/LICENSE
}
Changes since previous scan
--- PKGBUILD @ 2026-07-08 05:27+++ PKGBUILD @ 2026-09-12 19:12@@ -3,16 +3,17 @@ pkgname=redumper-bin url="https://github.com/superg/redumper" arch=('x86_64')+conflicts=('redumper') pkgdesc="Low level CD dumper utility" provides=('redumper')-pkgver=b683+pkgver=b732 pkgrel=1-_pkgfilename="redumper-b683-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :(+_pkgfilename="redumper-b732-linux-x64" # deviation from release tag, inclusion of date makes archive name nondeterministic :( license=('GPL3')-source=('https://github.com/superg/redumper/releases/download/b683/redumper-b683-linux-x64.zip'+source=('https://github.com/superg/redumper/releases/download/b732/redumper-b732-linux-x64.zip' 'https://raw.githubusercontent.com/superg/redumper/main/README.md' 'https://raw.githubusercontent.com/superg/redumper/main/LICENSE')-sha256sums=('13bfb9475424b54b2ffb1dfc2f8d738911912815282d9d93ea07926eb12c36bb'+sha256sums=('687a6ddef45092397aab6243ea854742033de722e28064896f651487a77ba1ee' 'SKIP' 'SKIP') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-12 19:12:35 | Low | 2 |
| 2026-08-12 01:22:13 | Clean | 0 |
| 2026-07-08 05:27:13 | Clean | 0 |
| 2026-06-18 16:11:54 | Clean | 0 |