sshz

LOW

maintainer Giovani_Geek 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package builds from source hosted on GitHub, uses a non-whitelisted but plausibly project-owned host for a Zig dependency with a fixed checksum, and performs no untrusted code execution or exfiltration; the main risk is low due to standard AUR build practices.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on GitHub, uses a non-whitelisted but plausibly project-owned host for a Zig dependency with a fixed checksum, and performs no untrusted code execution or exfiltration; the main risk is low due to standard AUR build practices.

PKGBUILD

      1# shellcheck disable=SC2034,SC2154,SC2164
    
      2# Maintainer: Energetix/Dark Nebula <https://github.com/Jobanny-Friki>
    
      3
    
      4pkgname=sshz
    
      5pkgver=1.1.0
    
      6pkgrel=1
    
      7pkgdesc="TUI-based SSH connection manager written in Zig with real-time host status monitoring and tag-based organization"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/midasdf/sshz"
    
      10license=('MIT')
    
      11depends=('glibc' 'openssh')
    
      12makedepends=('zig>=0.16.0')
    
      13source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz" "zigzag-0.1.5.tar.gz::https://github.com/meszmate/zigzag/archive/refs/tags/v0.1.5.tar.gz")
    
      14noextract=("zigzag-0.1.5.tar.gz")
    
      15sha256sums=('aefd575b2336c7611267a97620dd6ed43eccd8e3b41618d143ae71e5a869065b'
    
      16            '631810bf71695937a0d96de0b4af36efe3641a698d295bc51652176661dfae95')
    
      17
    
      18prepare() {
    
      19	cd "$pkgname-$pkgver"
    
      20	export ZIG_GLOBAL_CACHE_DIR="$srcdir/zig-global-cache"
    
      21	zig fetch "$srcdir/zigzag-0.1.5.tar.gz"
    
      22}
    
      23
    
      24build() {
    
      25	cd "$pkgname-$pkgver"
    
      26	export ZIG_GLOBAL_CACHE_DIR="$srcdir/zig-global-cache"
    
      27	zig build -Doptimize=ReleaseSafe -Dcpu=baseline
    
      28}
    
      29
    
      30check() {
    
      31	cd "$pkgname-$pkgver"
    
      32	export ZIG_GLOBAL_CACHE_DIR="$srcdir/zig-global-cache"
    
      33	zig build test -Dcpu=baseline
    
      34}
    
      35
    
      36package() {
    
      37	cd "$pkgname-$pkgver"
    
      38	install -Dm755 zig-out/bin/sshz "$pkgdir/usr/bin/sshz"
    
      39	install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      40	install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	1