sifter-bin

maintainer SelfRef · 0 votes · scanned 2026-08-18 15:40:04.149666
LOW
View on AUR ↗
Why flagged The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the recent upload and few votes, not malicious content.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and generally safe practice; the low severity is due to the recent upload and few votes, not malicious content.

PKGBUILD

1# Maintainer: SelfRef <arch@selfref.dev>
2
3_pkgbase=sifter
4pkgname="$_pkgbase-bin"
5pkgver=0.1.0
6pkgrel=1
7pkgdesc='Catalog photos, videos and audio into a date-structured library by capture date'
8arch=('x86_64' 'aarch64')
9url='https://github.com/SelfRef/sifter'
10license=('GPL-3.0-or-later')
11provides=("$_pkgbase")
12conflicts=("$_pkgbase")
13source_x86_64=("$_pkgbase-v$pkgver-x86_64-linux.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-v$pkgver-x86_64-linux.tar.gz")
14source_aarch64=("$_pkgbase-v$pkgver-aarch64-linux.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-v$pkgver-aarch64-linux.tar.gz")
15sha256sums_x86_64=('88a88d4e81b5da5304a744765a8b04a2f59a0524603090d9aa840227a8264b50')
16sha256sums_aarch64=('22e8694dc4b28074ec06774fbea31cd8fa8a1df8b0469adc4df933d7d2a9a64d')
17
18package() {
19 cd "$_pkgbase-v$pkgver-$CARCH-linux"
20 install -Dm0755 "$_pkgbase" "$pkgdir/usr/bin/$_pkgbase"
21 install -Dm0644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
22 install -Dm0644 CHANGELOG.md "$pkgdir/usr/share/doc/$pkgname/CHANGELOG.md"
23 install -Dm0644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 15:40:04 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion