timefs-bin

maintainer Dominiquini · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from GitHub releases, which is a supply-chain risk if the host is compromised, but it's from the project's official repository and the checksum is verified, limiting impact.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from GitHub releases, which is a supply-chain risk if the host is compromised, but it's from the project's official repository and the checksum is verified, limiting impact.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=itsbryanman
    
      4_gitname=timefs
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="A read-only FUSE filesystem that mounts a Git repository and lets you browse its history like normal directories."
    
      8
    
      9pkgver=0.1.0
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64')
    
      14_barch=('x86_64-unknown-linux-gnu')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('Unlincense')
    
      21
    
      22provides=("${_appname}")
    
      23conflicts=("${_appname}")
    
      24depends=('glibc' 'libgcc' 'fuse3' 'git')
    
      25
    
      26options=('!strip')
    
      27
    
      28source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_gitversion}-${_barch[0]}.tar.gz")
    
      29source_aarch64=("${_appname}-${arch[1]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_gitname}-${_gitversion}-${_barch[1]}.tar.gz")
    
      30sha256sums_x86_64=('3303c008dd4e64e3fd988035503c003fb3859b09b673b3bd120c512a2798a9f0')
    
      31
    
      32
    
      33case ${CARCH} in
    
      34  ${arch[0]})
    
      35    _CARCH=${_barch[0]}
    
      36    ;;
    
      37esac
    
      38
    
      39package() {
    
      40	cd "${srcdir}/${_gitname}-${_gitversion}-${_CARCH}/" || exit
    
      41
    
      42	install -Dm755 "${_appname}" -t "${pkgdir}/usr/bin/"
    
      43
    
      44	install -Dm644 "${_appname}.1" -t "${pkgdir}/usr/share/man/man1/"
    
      45
    
      46	install -Dm644 "README.md" -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 05:17:13	LOW	2