sleepy-bin

LOW

maintainer kopytkg 0 votes scanned 2026-08-31 09:44:49.557175

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's own GitLab instance, which is a plausible official source; while the host is not a common whitelist entry, it is project-owned, and the binary is installed directly without obfuscation or additional execution risks.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's own GitLab instance, which is a plausible official source; while the host is not a common whitelist entry, it is project-owned, and the binary is installed directly without obfuscation or additional execution risks.

PKGBUILD

      1# Maintainer: Martin Kopecký <kopecky@thekrew.app>
    
      2pkgname=sleepy-bin
    
      3pkgver=0.6.1
    
      4pkgrel=1
    
      5pkgdesc='Convert OpenAPI 3 specifications into Insomnia, Postman or Bruno collections'
    
      6arch=('x86_64')
    
      7url='https://gitlab.com/kopytkg/sleepy'
    
      8license=('BSD-3-Clause')
    
      9depends=('glibc')
    
      10provides=('sleepy')
    
      11conflicts=('sleepy')
    
      12
    
      13_registry="https://gitlab.com/api/v4/projects/84670021/packages/generic/sleepy"
    
      14source=("sleepy-$pkgver::$_registry/v$pkgver/sleepy"
    
      15        "LICENSE-$pkgver::$url/-/raw/v$pkgver/LICENSE")
    
      16noextract=("sleepy-$pkgver")
    
      17sha256sums=('5b39e20d96d941e1dc98b402a53ef08b1a6cdbfb36b68efcf6e8d87cc9170184'
    
      18            '765f202dfca30d8f4370bed3870c01b4fb40f7e4070d6cd84e24b250aebf2f69')
    
      19
    
      20package() {
    
      21  install -Dm755 "$srcdir/sleepy-$pkgver" "$pkgdir/usr/bin/sleepy"
    
      22  install -Dm644 "$srcdir/LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-31 09:44:49	Low	2