todav-bin

LOW

maintainer SelfRef 0 votes scanned 2026-10-23 07:37:02.440193

View on AUR

Why flagged

Package builds from a prebuilt binary release on the project's own GitHub, which is normal for AUR packages despite the host not being on all whitelists; the flagged low votes and recent upload are metadata concerns, not security risks.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a prebuilt binary release on the project's own GitHub, which is normal for AUR packages despite the host not being on all whitelists; the flagged low votes and recent upload are metadata concerns, not security risks.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=todav
    
      4pkgname="$_pkgbase-bin"
    
      5pkgver=1.0.0
    
      6pkgrel=1
    
      7pkgdesc='Tasks and calendar kept in your Nextcloud'
    
      8arch=('x86_64')
    
      9url='https://github.com/SelfRef/todav'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('gtk4' 'libadwaita>=1:1.8' 'libsecret' 'glib2' 'libgcc' 'glibc')
    
      12optdepends=('gnome-online-accounts: sign in with a GNOME Online Accounts account'
    
      13            'org.freedesktop.secrets: keep the passwords in the system keyring'
    
      14            'gnome-shell-extension-todav: tasks, month and agenda in the GNOME top bar')
    
      15provides=("$_pkgbase")
    
      16conflicts=("$_pkgbase")
    
      17source_x86_64=("$_pkgbase-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-$pkgver-x86_64.tar.gz")
    
      18noextract=("$_pkgbase-$pkgver-x86_64.tar.gz")
    
      19sha256sums_x86_64=('37e4d0dfc731508f5462941a213e517ad2c0c7f6c1f37d3236bd623d6069377c')
    
      20
    
      21package() {
    
      22	bsdtar -xf "$_pkgbase-$pkgver-x86_64.tar.gz" -C "$pkgdir" --no-same-owner
    
      23	# The extension is packaged on its own (gnome-shell-extension-todav-bin).
    
      24	rm -r "$pkgdir/usr/share/gnome-shell"
    
      25}
    
      26

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 07:37:02	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 21:36:17	Low	2