ryl-bin

LOW

maintainer agony4001 0 votes scanned 2026-11-05 16:09:47.219016

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the binary nature of the sources and lack of build-from-source, but the official release context and valid checksums mitigate risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the binary nature of the sources and lack of build-from-source, but the official release context and valid checksums mitigate risk.

PKGBUILD

      1# Maintainer: agony <27015 at riseup dot net>
    
      2
    
      3pkgname=ryl-bin
    
      4pkgver=0.28.0
    
      5pkgrel=1
    
      6pkgdesc='Fast YAML linter and formatter (prebuilt)'
    
      7arch=('x86_64' 'aarch64' 'armv7h' 'powerpc64le')
    
      8url='https://github.com/owenlamont/ryl'
    
      9license=('MIT OR Apache-2.0')
    
      10depends=('glibc' 'libgcc')
    
      11provides=("ryl=${pkgver}")
    
      12conflicts=('ryl')
    
      13_release="${url}/releases/download/v${pkgver}"
    
      14source_x86_64=("ryl-${pkgver}-x86_64.tar.gz::${_release}/ryl-x86_64-unknown-linux-gnu.tar.gz")
    
      15source_aarch64=("ryl-${pkgver}-aarch64.tar.gz::${_release}/ryl-aarch64-unknown-linux-gnu.tar.gz")
    
      16source_armv7h=("ryl-${pkgver}-armv7h.tar.gz::${_release}/ryl-armv7-unknown-linux-gnueabihf.tar.gz")
    
      17source_powerpc64le=("ryl-${pkgver}-powerpc64le.tar.gz::${_release}/ryl-powerpc64le-unknown-linux-gnu.tar.gz")
    
      18sha256sums_x86_64=('6e0ae1db5dc9b3b3f7c389eca845b3665eee72e3a400eea32155ccc36b27469d')
    
      19sha256sums_aarch64=('8a4d3f7ea93bd5cf96d1a1d49732869c26e7ac126e38811d6650b53d1656ccba')
    
      20sha256sums_armv7h=('d9d2db97b1681df7ee60084bbcdd8f67bf1630f93f06c78e7a2630ca87958e1d')
    
      21sha256sums_powerpc64le=('0aec2c079ff73b25e2a1a7b4980f7eca5246c4f6cf7d826c8aaa190716f5b6d8')
    
      22
    
      23build() {
    
      24  for shell in bash fish zsh; do
    
      25    ./ryl --generate-completions "${shell}" > "completion.${shell}"
    
      26  done
    
      27}
    
      28
    
      29package() {
    
      30  install -Dm755 ryl -t "${pkgdir}/usr/bin"
    
      31  install -Dm644 completion.bash "${pkgdir}/usr/share/bash-completion/completions/ryl"
    
      32  install -Dm644 completion.fish "${pkgdir}/usr/share/fish/vendor_completions.d/ryl.fish"
    
      33  install -Dm644 completion.zsh "${pkgdir}/usr/share/zsh/site-functions/_ryl"
    
      34  install -Dm644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      35  install -Dm644 ryl-yaml-parser/LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/ryl-yaml-parser"
    
      36  install -Dm644 ryl-yaml-parser/.licenses/* -t "${pkgdir}/usr/share/licenses/${pkgname}/ryl-yaml-parser/.licenses"
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 16:09:47	Low	2