timerun-git (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from the project's own Git repository, which is a normal AUR practice; the low-vote and recent-upload warning is a metadata concern, not a security risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1pkgname=timerun-git
    
      2_pkgname=timerun
    
      3pkgver=1.0.0.r7.g7deb602
    
      4pkgrel=1
    
      5pkgdesc="timerun and timeEye is a dynamic POSIX time interception and diagnostic system. Ideal for running applications on any date without modifying the system time."
    
      6arch=('x86_64')
    
      7url="https://github.com/AndresDev859674/timerun"
    
      8license=('GPL-3.0-or-later')
    
      9depends=('glibc')
    
      10makedepends=('git' 'gcc' 'make')
    
      11provides=('timerun' 'timeeye')
    
      12conflicts=('timerun' 'timeeye')
    
      13source=("git+${url}.git")
    
      14sha256sums=('SKIP')
    
      15
    
      16pkgver() {
    
      17  cd "$_pkgname"
    
      18  git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      19}
    
      20
    
      21build() {
    
      22  cd "$_pkgname"
    
      23  make CFLAGS="$CFLAGS" LDFLAGS="$LDFLAGS"
    
      24}
    
      25
    
      26package() {
    
      27  cd "$_pkgname"
    
      28  make PREFIX=/usr DESTDIR="$pkgdir" install
    
      29}
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-21 00:01:35	Clean	2
2026-08-20 23:13:41	Low	1