shuck-bin

LOW
maintainer e-kwsm 0 votes scanned 2026-09-02 15:51:02.635429
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the static rule about few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD itself.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the static rule about few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD itself.

PKGBUILD

1# Maintainer: Eisuke Kawashima <e DOT kawaschima+archlinux AT gmail DOT com>
2
3pkgname=shuck-bin
4pkgdesc='A lightning fast shell linter/formatter/LSP server'
5pkgver=0.2.1
6pkgrel=1
7url='https://ewhauser.github.io/shuck/'
8arch=('x86_64')
9license=('MIT')
10depends=('libgcc')
11provides=("${pkgname%-bin}=${pkgver}")
12conflicts=("${pkgname%-bin}")
13options=('!debug' '!strip')
14source_x86_64=("shuck-cli-v${pkgver}-x86_64-unknown-linux-gnu.tar.xz::https://github.com/ewhauser/shuck/releases/download/v${pkgver}/shuck-cli-x86_64-unknown-linux-gnu.tar.xz")
15sha256sums_x86_64=('733cbedafeec7c6f016723cf89318e719d93136db786d9aa8f0e831a3be2635a')
16
17package() {
18 cd "${srcdir}/shuck-cli-x86_64-unknown-linux-gnu"
19 install -Dm755 -t "${pkgdir}/usr/bin/" "${pkgname%-bin}"
20 install -Dm644 -t "${pkgdir}/usr/share/licenses/${pkgname}/" LICENSE
21}
22

Scan history

Scanned at (UTC)SeverityRules
2026-09-02 15:51:02 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion