stuhelper-bin

LOW

maintainer micraow 0 votes scanned 2026-09-26 05:14:08.085534

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not a major vendor, it's the project's own release infrastructure, and the binary is not executed at build/install time, limiting supply-chain risk to the software itself.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a GitHub release by the maintainer; while the host is not a major vendor, it's the project's own release infrastructure, and the binary is not executed at build/install time, limiting supply-chain risk to the software itself.

PKGBUILD

      1# Maintainer: Micraow <15190450708 at 163 dot com>
    
      2pkgname=stuhelper-bin
    
      3pkgver=0.1.4
    
      4pkgrel=1
    
      5pkgdesc="AI gateway desktop assistant for BUAA students - one-click bridge to Claude Code / Codex (binary release)"
    
      6arch=('x86_64')
    
      7url="https://github.com/Micraow/MoonBridge-Release"
    
      8license=('custom')
    
      9depends=('gtk3' 'webkit2gtk-4.1' 'libappindicator-gtk3')
    
      10provides=('stuhelper')
    
      11conflicts=('stuhelper')
    
      12options=('!strip')
    
      13source=("stuhelper-${pkgver}.deb::https://github.com/Micraow/MoonBridge-Release/releases/download/v${pkgver}/StuHelper-v${pkgver}-linux.deb"
    
      14        "LICENSE")
    
      15sha256sums=('97741d8813e5b839fdc6d663bb906680ad84115031a6117d31e9468c7acdeaae'
    
      16            'a607afaac61dfc4a32e4d54b00eee51443bf34aa1b7f4fecf80750fdc25a4c22')
    
      17
    
      18package() {
    
      19    # makepkg 已把 .deb 解成 debian-binary / control.tar.gz / data.tar.gz，
    
      20    # 这里把 data 段的 FHS 布局原样铺进 $pkgdir
    
      21    bsdtar -xf "${srcdir}/data.tar.gz" -C "${pkgdir}"
    
      22    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-26 05:14:08	Low	2