shottino-bin

LOW

maintainer vash909 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to limited community trust signals (few votes, recent upload), not malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to limited community trust signals (few votes, recent upload), not malicious behavior.

PKGBUILD

      1# Maintainer: vash909 <iu1bot@xzgroup.net>
    
      2
    
      3pkgname=shottino-bin
    
      4pkgver=0.3.1
    
      5pkgrel=1
    
      6# Shottino has its own version, independent of the containing Grappa release.
    
      7_upstream_tag=v1.5.14
    
      8_asset=shottino-0.3.1-1-x86_64.pkg.tar.zst
    
      9pkgdesc='Terminal client and IRC bridge for Grappa with an ncurses interface (official binary)'
    
      10arch=('x86_64')
    
      11url='https://github.com/vjt/grappa-irc'
    
      12license=('MIT')
    
      13depends=('ca-certificates' 'glibc' 'ncurses' 'openssl')
    
      14optdepends=('grappa-bin: run a local Grappa server'
    
      15            'ffmpeg: inline image, video and GIF previews'
    
      16            'chafa: enhanced terminal image rendering'
    
      17            'xdg-utils: open links in external applications')
    
      18provides=("shottino=${pkgver}")
    
      19conflicts=('shottino')
    
      20options=('!strip' '!debug')
    
      21source=("${pkgname}-${_upstream_tag}-${_asset}::${url}/releases/download/${_upstream_tag}/${_asset}"
    
      22        'README.md')
    
      23noextract=("${pkgname}-${_upstream_tag}-${_asset}")
    
      24sha256sums=('399d1eebd4c8a9cd2b021f234314bb8d0269c3b4bbcf2c1ad0719d660185b7ae'
    
      25            '9e10e292cb2f14c8bb99fcbf5c65c20b7309d6ee8655a3a8d3212c38a1fdb8e6')
    
      26
    
      27package() {
    
      28    bsdtar --no-same-owner -xf "${srcdir}/${pkgname}-${_upstream_tag}-${_asset}" -C "${pkgdir}" usr
    
      29    mv "${pkgdir}/usr/share/licenses/shottino" "${pkgdir}/usr/share/licenses/${pkgname}"
    
      30    install -Dm644 "${srcdir}/README.md" "${pkgdir}/usr/share/doc/shottino/README.md"
    
      31}
    
      32

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 23:21:11	Low	2