saxby-bin
The package installs prebuilt binaries from the project's official GitHub releases, which is a normal practice for -bin packages; the source is trustworthy and checksums are provided, so the risk is low despite the flagged low votes and recent upload.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs prebuilt binaries from the project's official GitHub releases, which is a normal practice for -bin packages; the source is trustworthy and checksums are provided, so the risk is low despite the flagged low votes and recent upload.
PKGBUILD
# Maintainer: Niko Lowry <niko@neeks.me>
#
# Template. The release workflow fills in 0.9.5 and the
# @SHA256_*@ checksums and attaches the result to the release, so
# this file is never edited by hand per release.
#
# Prebuilt binaries, hence the AUR -bin naming convention.
pkgname=saxby-bin
pkgver=0.9.5
pkgrel=1
pkgdesc="Local-first LLM routing daemon"
arch=('x86_64' 'aarch64')
url="https://github.com/saxby-tools/saxby"
license=('AGPL-3.0-or-later')
depends=('glibc')
provides=('saxby')
conflicts=('saxby')
# Deno appends the program to the runtime inside each binary.
# Stripping it removes the program, so never strip.
options=('!strip')
_base="https://github.com/saxby-tools/saxby/releases/download"
_stage="saxby-${pkgver}"
source_x86_64=("${_base}/v${pkgver}/${_stage}-linux-x64.tar.gz")
source_aarch64=("${_base}/v${pkgver}/${_stage}-linux-arm64.tar.gz")
sha256sums_x86_64=('3d513fefa15a6dc87ec2dfc69fc6d77833e81d821b3562203a41800a73738cd0')
sha256sums_aarch64=('47f82c92d8435193fcb01dbfc50d5bc626cf7b62f03bf0c2136e4ec5bf04963e')
package() {
local target
case "${CARCH}" in
x86_64) target="linux-x64" ;;
aarch64) target="linux-arm64" ;;
esac
local dir="${srcdir}/${_stage}-${target}"
install -Dm755 "${dir}/saxbyd" "${pkgdir}/usr/bin/saxbyd"
install -Dm755 "${dir}/saxby" "${pkgdir}/usr/bin/saxby"
install -Dm644 "${dir}/LICENSE" \
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
# Generated by scripts/build.js and shipped in the tarball.
local share="${pkgdir}/usr/share"
install -Dm644 "${dir}/completions/saxby.bash" \
"${share}/bash-completion/completions/saxby"
install -Dm644 "${dir}/completions/_saxby" \
"${share}/zsh/site-functions/_saxby"
install -Dm644 "${dir}/completions/saxby.fish" \
"${share}/fish/vendor_completions.d/saxby.fish"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-26 03:43:44 | Low | 2 |