swayview-bin
The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for binary packages; the low severity is due to the lack of source availability and limited community trust signals (few votes, recent upload), but the source host is legitimate and the package does not exhibit malicious behavior.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for binary packages; the low severity is due to the lack of source availability and limited community trust signals (few votes, recent upload), but the source host is legitimate and the package does not exhibit malicious behavior.
PKGBUILD
# Maintainer: Viktoras Agejevas <v.agejevas at gmail dot com>
pkgname=swayview-bin
_pkgname=swayview
pkgver=0.1.8
pkgrel=1
pkgdesc='Live workspace overview for sway (prebuilt binary)'
arch=('x86_64')
url='https://github.com/agejevasv/swayview'
license=('MIT')
depends=('glibc' 'libgcc' 'libxkbcommon' 'sway')
provides=("$_pkgname=$pkgver")
conflicts=("$_pkgname")
options=('!strip' '!debug')
source=("$url/releases/download/v$pkgver/$_pkgname-v$pkgver-x86_64-linux.tar.gz")
sha256sums=('2ac7f042793849f770251fc24acedb7b27834354fbe38c501c96768a46ff9a88')
package() {
cd "$_pkgname-v$pkgver-x86_64-linux"
install -Dm0755 -t "$pkgdir/usr/bin/" "$_pkgname"
install -Dm644 README.md "$pkgdir/usr/share/doc/$_pkgname/README.md"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 23:40:58 | Low | 1 |