tardigrade

LOW

maintainer horizzon 0 votes scanned 2026-10-23 03:36:21.010368

View on AUR

Why flagged

The package builds from verifiable upstream source code using Git, despite the unverifiable checksum; it does not execute unreviewed remote code or include prebuilt binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from verifiable upstream source code using Git, despite the unverifiable checksum; it does not execute unreviewed remote code or include prebuilt binaries.

PKGBUILD

      1# Maintainer: horizzon3507 <148660626+horizzon3507@users.noreply.github.com>
    
      2# Upstream: https://github.com/smoothyy3/tardigrade
    
      3#
    
      4# The creature is a 96 KB set of learned weights baked into the binary; there is
    
      5# no image of it anywhere. Building from the tagged source keeps that promise
    
      6# verifiable instead of trusting a prebuilt blob.
    
      7
    
      8pkgname=tardigrade
    
      9pkgver=0.1.1
    
      10pkgrel=1
    
      11pkgdesc="Self-healing creature of learned weights that lives in your terminal"
    
      12arch=('x86_64' 'aarch64')
    
      13url="https://github.com/smoothyy3/tardigrade"
    
      14license=('MIT')
    
      15makedepends=('go' 'git')
    
      16source=("git+${url}.git#tag=v${pkgver}")
    
      17sha256sums=('SKIP')
    
      18
    
      19export CGO_ENABLED=0
    
      20export GOFLAGS="-mod=mod -buildvcs=false"
    
      21
    
      22build() {
    
      23  cd "${pkgname}"
    
      24  export GOPATH="${srcdir}/gopath"
    
      25  export GOCACHE="${srcdir}/gocache"
    
      26  go build -trimpath \
    
      27    -ldflags "-s -w -X main.version=v${pkgver}" \
    
      28    -o "${pkgname}" ./cmd/tardigrade
    
      29}
    
      30
    
      31check() {
    
      32  cd "${pkgname}"
    
      33  export GOPATH="${srcdir}/gopath"
    
      34  export GOCACHE="${srcdir}/gocache"
    
      35  go test ./...
    
      36}
    
      37
    
      38package() {
    
      39  cd "${pkgname}"
    
      40  install -Dm755 "${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
    
      41  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      42  install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 03:36:21	Low	2