rustatio-bin

MEDIUM

maintainer fr0stb1rd 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release (unofficial build artifact), which is a supply-chain risk if the source is swapped, though it comes from a project-owned domain.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from a GitHub release (unofficial build artifact), which is a supply-chain risk if the source is swapped, though it comes from a project-owned domain.

PKGBUILD

      1# Maintainer: fr0stb1rd <fr0stb1rd@proton.me>
    
      2
    
      3_pkgname="rustatio"
    
      4pkgname="$_pkgname-bin"
    
      5pkgver="2.11.0"
    
      6pkgrel=2
    
      7pkgdesc="Modern cross-platform BitTorrent ratio management tool that emulates popular torrent clients (prebuilt)"
    
      8url="https://github.com/takitsu21/rustatio"
    
      9license=('MIT')
    
      10arch=('x86_64')
    
      11provides=("${_pkgname}")
    
      12conflicts=("${_pkgname}")
    
      13options=('!strip')
    
      14
    
      15depends=(
    
      16  'libayatana-appindicator'
    
      17  'webkit2gtk-4.1'
    
      18  'gtk3'
    
      19)
    
      20
    
      21source=(
    
      22  "LICENSE::https://raw.githubusercontent.com/takitsu21/rustatio/v${pkgver}/LICENSE"
    
      23  "rustatio.desktop"
    
      24)
    
      25sha256sums=('f6788a3a6fc81be8fd0afb7a279245ab7c9931aea951f26b27ffcf0b8118ee70'
    
      26            'dc64e0264fbaf1e95054cd6bce050fbefc630f5e9db6e73bcdb7d03240c36d65')
    
      27sha256sums_x86_64=('b1a53d89458e3057dff3b9d56f6a5a8d3fa2de376b16a5d23c6ede0b16a22c89')
    
      28
    
      29source_x86_64=("${pkgname}-${pkgver}.deb::https://github.com/takitsu21/rustatio/releases/download/v${pkgver}/Rustatio_${pkgver}_amd64.deb")
    
      30
    
      31prepare() {
    
      32  cd "${srcdir}"
    
      33  bsdtar -xf "${pkgname}-${pkgver}.deb"
    
      34  bsdtar -xf data.tar.gz
    
      35}
    
      36
    
      37package() {
    
      38  cd "${srcdir}"
    
      39
    
      40  install -d "${pkgdir}/usr/bin"
    
      41  install -d "${pkgdir}/usr/share/applications"
    
      42  install -d "${pkgdir}/usr/share/licenses/${pkgname}"
    
      43
    
      44  install -m755 usr/bin/rustatio-desktop "${pkgdir}/usr/bin/rustatio-desktop"
    
      45  ln -s /usr/bin/rustatio-desktop "${pkgdir}/usr/bin/${_pkgname}"
    
      46
    
      47  install -m644 "${srcdir}/rustatio.desktop" "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      48  install -m644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      49
    
      50  for _size in 32x32 128x128 256x256 512x512 1024x1024; do
    
      51    install -d "${pkgdir}/usr/share/icons/hicolor/${_size}/apps"
    
      52    install -m644 "usr/share/icons/hicolor/${_size}/apps/rustatio-desktop.png" \
    
      53      "${pkgdir}/usr/share/icons/hicolor/${_size}/apps/"
    
      54  done
    
      55}
    
      56

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2
2026-10-15 00:28:05	Medium	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2
2026-10-12 00:18:51	Medium	2
2026-10-11 00:26:05	Medium	2
2026-10-10 00:12:40	Medium	2