rosec-provider-protonpass-bin

LOW

maintainer jmylchreest 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package installs prebuilt WASM module and policy files from a maintainer-controlled GitHub release; while the host is not a major vendor, the files are data/artifacts for a plugin system, not executed code, and the checksum is provided and matches a signed release.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package installs prebuilt WASM module and policy files from a maintainer-controlled GitHub release; while the host is not a major vendor, the files are data/artifacts for a plugin system, not executed code, and the checksum is provided and matches a signed release.

PKGBUILD

      1# Maintainer: John Mylchreest <jmylchreest@gmail.com>
    
      2# Render 0.0.36 and b8d5dc4faf519035a1139738a2bf582e9380b4106e9a9eb73381cdebea1e3a62 from the signed release.
    
      3pkgname=rosec-provider-protonpass-bin
    
      4pkgver=0.0.36
    
      5pkgrel=1
    
      6pkgdesc="Proton Pass read-only provider for rosec (prebuilt)"
    
      7arch=('any')
    
      8url="https://github.com/jmylchreest/rosec"
    
      9license=('GPL-3.0-or-later')
    
      10depends=(
    
      11    'rosec>=0.0.36'
    
      12)
    
      13provides=('rosec-provider-protonpass')
    
      14conflicts=('rosec-provider-protonpass')
    
      15
    
      16source=(
    
      17    "rosec-provider-protonpass-${pkgver}.wasm.tar.gz::https://github.com/jmylchreest/rosec/releases/download/v${pkgver}/rosec-provider-protonpass-${pkgver}.wasm.tar.gz"
    
      18)
    
      19sha256sums=('b8d5dc4faf519035a1139738a2bf582e9380b4106e9a9eb73381cdebea1e3a62')
    
      20
    
      21package() {
    
      22    install -Dm644 "${srcdir}/rosec_protonpass.wasm" \
    
      23        "${pkgdir}/usr/lib/rosec/providers/rosec_protonpass.wasm"
    
      24    install -Dm644 "${srcdir}/rosec_protonpass.wasm.policy.toml" \
    
      25        "${pkgdir}/usr/lib/rosec/providers/rosec_protonpass.wasm.policy.toml"
    
      26    install -Dm644 "${srcdir}/rosec_protonpass.wasm.minisig" \
    
      27        "${pkgdir}/usr/lib/rosec/providers/rosec_protonpass.wasm.minisig"
    
      28    install -dm755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      29    cp -r "${srcdir}/protonpass-notices/." "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      30}
    
      31
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-11 00:16:25	Low	2