tine-bin

LOW
maintainer damien.flament 0 votes scanned 2026-08-22 17:18:20.171967
View on AUR
Why flagged

The package installs a prebuilt .deb from the project's official GitHub releases; while the host is not whitelisted, it is the project's own release infrastructure, and the binaries are checksum-verified, making the supply-chain risk low.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub releases; while the host is not whitelisted, it is the project's own release infrastructure, and the binaries are checksum-verified, making the supply-chain risk low.

PKGBUILD

1# shellcheck shell=bash disable=SC2034,SC2154
2
3# Maintainer: Damien Flament <damien dot flament at zoho dot com>
4
5pkgname='tine-bin'
6pkgver=0.6.93
7pkgrel=1
8pkgdesc="A fast, local, Logseq-compatible outliner"
9url='https://tine.page/'
10license=('AGPL-3.0-only')
11
12arch=('x86_64' 'aarch64')
13depends=('webkit2gtk-4.1' 'gtk3')
14
15_source_base="https://github.com/martinkoutecky/tine/releases/download/v${pkgver}/Tine_${pkgver}"
16source_x86_64=("${pkgname}-${pkgver}-${CARCH}.deb::${_source_base}_amd64.deb")
17source_aarch64=("${pkgname}-${pkgver}-${CARCH}.deb::${_source_base}_arm64.deb")
18sha256sums_x86_64=("863cffa13fa0cf5de1b20315f291364a55779c1e53e63c344d333f10fb7a678d")
19sha256sums_aarch64=("c75888f13441857946181d505873d83bab5559dadfca3900ff66364f2ce68993")
20
21function package {
22 tar -xf data.tar.gz -C "${pkgdir}"
23}
24
25# vim: ft=sh
26

Scan history

Scanned at (UTC)SeverityRules
2026-08-22 17:18:20 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion