sicth-bin

LOW
maintainer Dominiquini 1 votes scanned 2026-09-05 20:01:32.631454
View on AUR
Why flagged

The package downloads a prebuilt binary from GitHub releases, which is a common but unverifiable practice; however, it's from the project's own repository and the checksum is provided, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from GitHub releases, which is a common but unverifiable practice; however, it's from the project's own repository and the checksum is provided, reducing risk.

PKGBUILD

1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
2
3_gitauthor=reekta92
4_gitname=sicth
5_appname=${_gitname}
6pkgname=${_gitname}-bin
7pkgdesc="A minimal TUI file navigator"
8
9pkgver=1.1.1
10pkgrel=1
11_gitversion=v${pkgver}
12
13arch=('x86_64')
14_barch=('x86_64-unknown-linux-gnu')
15
16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
18url=${_ghurl}
19
20license=('GPL-3.0')
21
22provides=("${_appname}")
23conflicts=("${pkgname%%-bin}")
24
25depends=('glibc' 'libgcc')
26
27options=(!strip)
28
29source_x86_64=("${_appname}-${arch[0]}-${pkgver}.txz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_barch[0]}.tar.xz")
30sha256sums_x86_64=('2e73af2a00576697fc930878ee543ba58fadfa1a33ca6c702be75a9f1fefc079')
31
32
33case ${CARCH} in
34 ${arch[0]})
35 _CARCH=${_barch[0]}
36 ;;
37esac
38
39package() {
40 cd "${srcdir}/" || exit
41
42 install -Dm755 "${_appname}" "${pkgdir}/usr/bin/${_appname}"
43
44 install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
45
46 install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
47}
48

Scan history

Scanned at (UTC)SeverityRules
2026-09-05 20:01:32 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion