scout-mcp-bin

LOW
maintainer srousseau 0 votes scanned 2026-09-27 00:07:07.510666
View on AUR
Why flagged

The package downloads prebuilt binaries from GitHub releases, which is a common but non-ideal practice; however, the sources are from the project's official repository, have fixed versioned URLs, and include checksums, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a common but non-ideal practice; however, the sources are from the project's official repository, have fixed versioned URLs, and include checksums, reducing risk.

PKGBUILD

1# Maintainer: Sebastien Rousseau <sebastian.rousseau@gmail.com>
2
3pkgname=scout-mcp-bin
4_pkgname=scout-mcp
5pkgver=0.0.6
6pkgrel=1
7pkgdesc="An MCP server exposing scout's diagnostics as read-only tools: evaluate an MCP server, or verify an attestation, from inside the agent"
8arch=('x86_64' 'aarch64')
9url='https://github.com/sebastienrousseau/scout-mcp'
10license=('GPL-3.0-only')
11# scout-mcp runs the scout program; it is not linked in.
12depends=('scout')
13provides=('scout-mcp')
14conflicts=('scout-mcp')
15source_x86_64=("${_pkgname}-${pkgver}-x86_64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}_Linux_x86_64.tar.gz")
16source_aarch64=("${_pkgname}-${pkgver}-aarch64.tar.gz::${url}/releases/download/v${pkgver}/${_pkgname}_Linux_arm64.tar.gz")
17sha256sums_x86_64=('da66cc2c04295a91a5ad5458e7f8a850287b4335d258c71eb1824e9475c03079')
18sha256sums_aarch64=('0eb650044b6a6acf25060201296f4751905e371ffc250e07bd2c16a75fdfad55')
19
20package() {
21 install -Dm755 scout-mcp "${pkgdir}/usr/bin/scout-mcp"
22 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
23 install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-09-27 00:07:07 Low 2
2026-09-26 11:15:02 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion