sculk-bin

maintainer Kercy · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from the project's GitHub releases, which is a common and acceptable practice; the low severity is due to the unverified source and recent upload with few votes, but the binary is from the maintainer's official repository, reducing immediate risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's GitHub releases, which is a common and acceptable practice; the low severity is due to the unverified source and recent upload with few votes, but the binary is from the maintainer's official repository, reducing immediate risk.

PKGBUILD

      1# Maintainer: KercyDing <dkx215417@gmail.com>
    
      2pkgname=sculk-bin
    
      3pkgver=0.6.0
    
      4pkgrel=1
    
      5_releasever=${pkgver//_/-}
    
      6pkgdesc="Minecraft P2P multiplayer tunnel CLI"
    
      7arch=('x86_64')
    
      8url="https://github.com/KercyDing/sculk"
    
      9license=('MIT' 'Apache-2.0')
    
      10provides=("sculk=${pkgver}" "sculk-cli=${pkgver}")
    
      11conflicts=('sculk' 'sculk-git' 'sculk-cli-bin' 'sculk-cli-git')
    
      12replaces=('sculk-cli-bin')
    
      13source=("sculk-${pkgver}::${url}/releases/download/v${_releasever}/sculk-linux-amd64")
    
      14sha256sums=('b859f3edf4653065b850d50b8d06c21806f2a7d125a1d0564913c78357650375')
    
      15
    
      16package() {
    
      17    install -Dm755 "${srcdir}/sculk-${pkgver}" "${pkgdir}/usr/bin/sculk"
    
      18}
    
      19

Changes since previous scan

--- PKGBUILD @ 2026-07-28 03:37
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 # Maintainer: KercyDing <dkx215417@gmail.com>
 pkgname=sculk-bin
-pkgver=0.5.0
+pkgver=0.6.0
 pkgrel=1
 _releasever=${pkgver//_/-}
 pkgdesc="Minecraft P2P multiplayer tunnel CLI"
@@ -11,7 +11,7 @@
 conflicts=('sculk' 'sculk-git' 'sculk-cli-bin' 'sculk-cli-git')
 replaces=('sculk-cli-bin')
 source=("sculk-${pkgver}::${url}/releases/download/v${_releasever}/sculk-linux-amd64")
-sha256sums=('8fbaca42ee731b45047ce2d218152c43d2d9861ea0bc3fb095c0b758f936645c')
+sha256sums=('b859f3edf4653065b850d50b8d06c21806f2a7d125a1d0564913c78357650375')
 
 package() {
     install -Dm755 "${srcdir}/sculk-${pkgver}" "${pkgdir}/usr/bin/sculk"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 17:39:33	LOW	2
2026-07-28 03:37:00	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 17:35:03	LOW	2