spoo-cli

CLEAN

maintainer Dominiquini 1 votes scanned 2026-08-30 00:04:14.825026

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from official GitHub source with verifiable checksum, uses standard Go build process, and installs only the compiled binary, completions, docs, and license; no remote code execution or untrusted payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=spoo-me
    
      4_gitname=spoo-cli
    
      5_appname=${_gitname%-cli}
    
      6pkgname=${_gitname}
    
      7pkgdesc="Official spoo.me CLI to shorten links and view analytics from your terminal"
    
      8
    
      9pkgver=0.4.1
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64' 'aarch64')
    
      14_barch=('linux_amd64' 'linux_arm64')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('Apache-2.0')
    
      21
    
      22provides=("${_appname}")
    
      23
    
      24makedepends=('go')
    
      25
    
      26options=('!strip')
    
      27
    
      28source=("${pkgname}-${pkgver}.tgz::${url}/archive/v${pkgver}.tar.gz")
    
      29sha256sums=('3b44676ce918392cb89ded088e75f1c6c819657b62d345555508207e4c055356')
    
      30
    
      31prepare() {
    
      32	cd "${srcdir}/${pkgname}-${pkgver}/" || exit
    
      33
    
      34	go mod tidy
    
      35}
    
      36
    
      37build() {
    
      38	cd "${srcdir}/${pkgname}-${pkgver}/" || exit
    
      39
    
      40	export CGO_ENABLED=0
    
      41
    
      42	if [[ -f .ldflags ]]; then
    
      43		ldflags=$(<.ldflags)
    
      44	else
    
      45		# interim until commit fix is released
    
      46		ldflags="-checklinkname=0"
    
      47	fi
    
      48
    
      49	go build -trimpath -ldflags "${ldflags}" -o "${pkgname}" ./cmd/${_appname}
    
      50
    
      51	mkdir -p "./completions"
    
      52
    
      53	"./${pkgname}" completion zsh > "./completions/${_appname}.zsh"
    
      54	"./${pkgname}" completion bash > "./completions/${_appname}.bash"
    
      55	"./${pkgname}" completion fish > "./completions/${_appname}.fish"
    
      56}
    
      57
    
      58package() {
    
      59	cd "${srcdir}/${pkgname}-${pkgver}/" || exit
    
      60
    
      61	install -Dm755 "${pkgname}" "${pkgdir}/usr/bin/${_appname}"
    
      62
    
      63	install -D -m644 "completions/${_appname}.bash" "${pkgdir}/usr/share/bash-completion/completions/${_appname}"
    
      64	install -D -m644 "completions/${_appname}.zsh" "${pkgdir}/usr/share/zsh/site-functions/_${_appname}"
    
      65	install -D -m644 "completions/${_appname}.fish" "${pkgdir}/usr/share/fish/vendor_completions.d/${_appname}.fish"
    
      66
    
      67	install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      68
    
      69	install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      70}
    
      71

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-30 00:04:14	Clean	2
2026-08-29 23:41:07	Low	1