scout

CLEAN

maintainer srousseau 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from source hosted on the project's own GitHub repository, uses standard Go tooling, and installs only the resulting binaries and generated documentation; no untrusted remote code execution or malicious patterns are present.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Sebastien Rousseau <sebastian.rousseau@gmail.com>
    
      2
    
      3pkgname=scout
    
      4pkgver=0.0.7
    
      5pkgrel=1
    
      6pkgdesc='Diagnose Model Context Protocol servers end to end: nine phases, every finding tied to the request that produced it'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/sebastienrousseau/scout'
    
      9license=('GPL-3.0-only')
    
      10depends=('glibc')
    
      11makedepends=('go')
    
      12source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz")
    
      13sha256sums=('afcd587e7912e026ff871a82418fac1c28b7635c38aa014683e84068bc9e1539')
    
      14
    
      15prepare() {
    
      16  cd "${pkgname}-${pkgver}"
    
      17  export GOPATH="${srcdir}/gopath"
    
      18  go mod download -x
    
      19}
    
      20
    
      21build() {
    
      22  cd "${pkgname}-${pkgver}"
    
      23  export GOPATH="${srcdir}/gopath"
    
      24  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      25  export CGO_CFLAGS="${CFLAGS}"
    
      26  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      27  export CGO_LDFLAGS="${LDFLAGS}"
    
      28  export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      29  go build -o scout \
    
      30    -ldflags "-linkmode=external -X github.com/sebastienrousseau/scout/cmd.Version=${pkgver}" \
    
      31    ./cmd/scout
    
      32  # The manpages and completions the release archives carry, generated the
    
      33  # same way the release does.
    
      34  go run ./scripts/gen_docs.go build
    
      35}
    
      36
    
      37package() {
    
      38  cd "${pkgname}-${pkgver}"
    
      39  install -Dm755 scout "${pkgdir}/usr/bin/scout"
    
      40  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      41  install -Dm644 -t "${pkgdir}/usr/share/man/man1" build/man/*.1
    
      42  install -Dm644 build/completions/scout.bash "${pkgdir}/usr/share/bash-completion/completions/scout"
    
      43  install -Dm644 build/completions/scout.zsh "${pkgdir}/usr/share/zsh/site-functions/_scout"
    
      44  install -Dm644 build/completions/scout.fish "${pkgdir}/usr/share/fish/vendor_completions.d/scout.fish"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 11:15:02	Low	1