simplesinewavegenerator-bin

MEDIUM
maintainer CxOrg 0 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package installs a precompiled binary from a GitHub release with an unverifiable 'SKIP' checksum, creating a supply-chain risk if the source were compromised.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-07-25) reviewed it and judged it MEDIUM (confidence 95%): The package installs a precompiled binary from a GitHub release with an unverifiable 'SKIP' checksum, creating a supply-chain risk if the source were compromised.

PKGBUILD

1# Maintainer: CxOrg <clx.org@cloud-org.uk>
2pkgname=simplesinewavegenerator-bin
3pkgver=0.0.4
4pkgrel=1
5pkgdesc="Simple sine wave generator with GTK3 GUI and logarithmic frequency sweep (pre-compiled binary)"
6arch=('x86_64')
7url="https://github.com/ixnewton/simpleSineWaveGenerator"
8license=('MIT')
9depends=('gtk3')
10optdepends=('pulseaudio: PulseAudio backend (or pipewire-pulse)')
11conflicts=('simplesinewavegenerator-git')
12provides=('simplesinewavegenerator')
13source=("https://github.com/ixnewton/simpleSineWaveGenerator/releases/download/v${pkgver}/simpleSineWaveGenerator-${pkgver}-x86_64.tar.gz")
14sha256sums=('SKIP')
15
16package() {
17 cd "$srcdir"
18
19 # Install binary
20 install -Dm755 simpleSineWaveGenerator "$pkgdir/usr/bin/simpleSineWaveGenerator"
21
22 # Install desktop file
23 install -Dm644 simplesinewavegenerator.desktop "$pkgdir/usr/share/applications/simplesinewavegenerator.desktop"
24
25 # Install icon
26 install -Dm644 simplesinewavegenerator.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/simplesinewavegenerator.svg"
27
28 # Install license
29 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
30
31 # Install documentation
32 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
33}
34

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Medium 2
2026-10-16 00:12:47 Medium 2
2026-10-15 00:28:05 Medium 2
2026-10-14 00:06:47 Medium 2
2026-10-13 00:23:45 Medium 2
2026-10-12 00:18:51 Medium 2
2026-10-11 00:26:05 Medium 2
2026-10-10 00:11:52 Medium 2
2026-10-09 18:12:17 Medium 2
2026-07-11 00:25:18 Clean 0
2026-07-10 00:20:30 Medium 2
2026-07-09 00:22:38 Medium 2
2026-07-08 00:26:52 Medium 2
2026-07-07 00:22:52 Medium 2
2026-07-06 00:10:58 Medium 2
2026-07-05 00:27:08 Medium 2
2026-07-04 00:27:25 Medium 2
2026-07-03 00:17:07 Medium 2
2026-07-02 00:22:12 Medium 2
2026-07-01 00:30:02 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion