tabex-bin
maintainer shpitdev
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt binary from a private GitHub release, requiring user access, which limits supply-chain risk; the binary is checksum-verified and the source is from the project's official repository.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a private GitHub release, requiring user access, which limits supply-chain risk; the binary is checksum-verified and the source is from the project's official repository.
PKGBUILD
1
# Maintainer: Anand Pant
2
3
pkgname=tabex-bin
4
pkgver=0.0.11
5
pkgrel=1
6
pkgdesc="Tabex CLI for browser session, capture, and page inspection"
7
arch=('x86_64')
8
url="https://github.com/shpitdev/tabex"
9
license=('LicenseRef-proprietary')
10
install="${pkgname}.install"
11
makedepends=('github-cli')
12
provides=('tabex')
13
conflicts=('tabex')
14
15
# Public PKGBUILD, private release asset. Users need GitHub access to the shpitdev org.
16
_asset="tabex_v${pkgver}_linux_amd64.tar.gz"
17
_sha256='b24871f68f28f748c691dfe18fcee6436c60d4d37beb25baecfacbdcb7e1177c'
18
19
prepare() {
20
gh release download "v${pkgver}" \
21
--repo shpitdev/tabex \
22
--pattern "${_asset}" \
23
--dir . --clobber
24
25
echo "${_sha256} ${_asset}" | sha256sum -c
26
tar xzf "${_asset}"
27
}
28
29
package() {
30
install -Dm755 "tabex_v${pkgver}_linux_amd64/tabex" \
31
"${pkgdir}/usr/bin/tabex"
32
}
33
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 09:37:42 | LOW | 2 |