tidy-cleaner-bin

LOW

maintainer MatvPlay 0 votes scanned 2026-09-03 00:15:47.366177

View on AUR

Why flagged

The package installs a precompiled binary from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from the project's official repository and the binary is not executed during build; realistic impact is limited to code execution on update if the release asset is tampered with.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a precompiled binary from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from the project's official repository and the binary is not executed during build; realistic impact is limited to code execution on update if the release asset is tampered with.

PKGBUILD

      1# Maintainer: Matvel007
    
      2pkgname=tidy-cleaner-bin
    
      3_pkgname=tidy-cleaner
    
      4pkgver=0.1.0
    
      5pkgrel=1
    
      6pkgdesc="Modern, ultra-fast, and safe system cleaner, manager, and hardware telemetry dashboard for Linux (precompiled binary)"
    
      7arch=('x86_64')
    
      8url="https://github.com/Matvel007/Tidy-Cleaner"
    
      9license=('MIT')
    
      10depends=('gcc-libs' 'glibc')
    
      11optdepends=(
    
      12    'polkit: Elevated privilege actions (system-wide uninstallation)'
    
      13    'nvidia-utils: GPU telemetry for NVIDIA graphics cards'
    
      14    'flatpak: Flatpak application management'
    
      15    'snapd: Snap application management'
    
      16    'yay: AUR package management'
    
      17    'paru: AUR package management'
    
      18)
    
      19provides=("$_pkgname")
    
      20conflicts=("$_pkgname" "$_pkgname-git")
    
      21source_x86_64=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/tidy-cleaner-v$pkgver-linux-x86_64.tar.gz")
    
      22sha256sums_x86_64=('650cbeb4dfad6fc4c6d318208a0d16e2bf8516e12692a85e48c115a5ff065371')
    
      23
    
      24package() {
    
      25    cd "$srcdir/tidy-cleaner"
    
      26    install -Dm755 "$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      27    install -Dm644 "$_pkgname.desktop" "$pkgdir/usr/share/applications/$_pkgname.desktop"
    
      28    install -Dm644 "$_pkgname.png" "$pkgdir/usr/share/pixmaps/$_pkgname.png"
    
      29    install -Dm644 "$_pkgname.png" "$pkgdir/usr/share/icons/hicolor/256x256/apps/$_pkgname.png"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-03 00:15:47	Low	2
2026-09-02 21:51:32	Low	2