tizen-cli

LOW

maintainer twilight0 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package builds from source hosted on a personal GitHub account with few votes and recent upload, but it is a legitimate Node.js CLI tool building from a locked commit; no malicious behavior observed.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from source hosted on a personal GitHub account with few votes and recent upload, but it is a legitimate Node.js CLI tool building from a locked commit; no malicious behavior observed.

PKGBUILD

      1# Maintainer: Twilight0 <twilight0@vivaldi.net>
    
      2
    
      3pkgname=tizen-cli
    
      4_pkgname=tizen.js
    
      5_commit=5717a6f882c561f739c194a8dd075f985f756d39
    
      6pkgver=1.1.0
    
      7pkgrel=1
    
      8pkgdesc="Lightweight CLI to build, install, and launch Tizen applications without Tizen Studio"
    
      9arch=('any')
    
      10url="https://github.com/reisxd/tizen.js"
    
      11license=('GPL-3.0-only')
    
      12depends=('nodejs')
    
      13makedepends=('npm')
    
      14provides=('tizenjs' 'tizen.js')
    
      15conflicts=('tizenjs' 'tizen.js')
    
      16source=("${pkgname}-${pkgver}-${pkgrel}.tar.gz::https://github.com/Twilight0/tizen.js/archive/${_commit}.tar.gz")
    
      17sha256sums=('6fa23abc4f8cf1f5adff3897865da20049cfd65cc7c9112aa11875013d49a815')
    
      18
    
      19build() {
    
      20  cd "${_pkgname}-${_commit}"
    
      21  npm pack
    
      22}
    
      23
    
      24package() {
    
      25  cd "${_pkgname}-${_commit}"
    
      26  npm install -g --prefix "${pkgdir}/usr" tizen-${pkgver}.tgz
    
      27
    
      28  # Symlink aliases
    
      29  ln -sf tizenjs "${pkgdir}/usr/bin/tizen-cli"
    
      30  ln -sf tizenjs "${pkgdir}/usr/bin/tizen.js"
    
      31
    
      32  # Clean npm metadata
    
      33  find "${pkgdir}" -name "package.json" -exec sed -i '/_where/d' {} + 2>/dev/null || true
    
      34  chmod u=rwX,go=rX -R "${pkgdir}"
    
      35}
    
      36

Changes since previous scan

--- PKGBUILD @ 2026-10-14 00:06
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,10 +2,10 @@
 
 pkgname=tizen-cli
 _pkgname=tizen.js
-_commit=bc86be41ddcc19fcd1b01988291f4f2683da7a81
-pkgver=1.0.1
-pkgrel=2
-pkgdesc="Lightweight CLI to rebuild, resign, and package Tizen applications without Tizen Studio"
+_commit=5717a6f882c561f739c194a8dd075f985f756d39
+pkgver=1.1.0
+pkgrel=1
+pkgdesc="Lightweight CLI to build, install, and launch Tizen applications without Tizen Studio"
 arch=('any')
 url="https://github.com/reisxd/tizen.js"
 license=('GPL-3.0-only')
@@ -14,7 +14,7 @@
 provides=('tizenjs' 'tizen.js')
 conflicts=('tizenjs' 'tizen.js')
 source=("${pkgname}-${pkgver}-${pkgrel}.tar.gz::https://github.com/Twilight0/tizen.js/archive/${_commit}.tar.gz")
-sha256sums=('709af4a8fe29a3c9e7578cdc38d943d115c9974595a7020e65868964c370c0fd')
+sha256sums=('6fa23abc4f8cf1f5adff3897865da20049cfd65cc7c9112aa11875013d49a815')
 
 build() {
   cd "${_pkgname}-${_commit}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 19:13:05	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 17:20:19	Low	2
2026-10-14 00:06:47	Clean	2
2026-10-13 15:17:00	Low	1