tabularis-nightly-bin

LOW

maintainer debba 0 votes scanned 2026-09-23 19:40:47.268111

View on AUR

Why flagged

The package downloads a prebuilt .deb from the project's official GitHub releases; while the host is not whitelisted, it is the project's own release infrastructure, and the checksum is provided, making supply-chain risk low despite the binary origin.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the project's official GitHub releases; while the host is not whitelisted, it is the project's own release infrastructure, and the checksum is provided, making supply-chain risk low despite the binary origin.

PKGBUILD

      1# Maintainer: Debba <andrea@tabularis.dev>
    
      2# Shared by tabularis-bin (stable) and tabularis-nightly-bin: aur.yml rewrites
    
      3# pkgname, pkgver, pkgdesc, _tag and _debver per channel before publishing.
    
      4pkgname=tabularis-nightly-bin
    
      5_pkgname=tabularis
    
      6pkgver=0.25.1.nightly2
    
      7pkgrel=1
    
      8_tag=nightly-20260923-ef21476
    
      9_debver=0.25.1-2
    
      10pkgdesc="Open-source desktop SQL workspace for PostgreSQL, MySQL/MariaDB, SQLite and 15+ more databases, with a built-in MCP server (nightly build)"
    
      11arch=('x86_64')
    
      12url="https://github.com/TabularisDB/tabularis"
    
      13license=('Apache-2.0')
    
      14provides=("${_pkgname}")
    
      15conflicts=("${_pkgname}")
    
      16depends=('webkit2gtk-4.1' 'gtk3' 'libappindicator-gtk3' 'openssl' 'libsecret')
    
      17source=("${_pkgname}_${_debver}_amd64.deb::${url}/releases/download/${_tag}/${_pkgname}_${_debver}_amd64.deb")
    
      18sha256sums=('34c44bad5e2e3c155866e41b027488bc2de76fff8f8f69988c277a29aac7c41b')
    
      19
    
      20package() {
    
      21    bsdtar -xf data.tar.* -C "${pkgdir}"
    
      22}
    
      23

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-23 19:40:47	Low	2