tokentracker-bin
maintainer thisisayande
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package installs a prebuilt .deb from the project's own GitHub releases, which is a normal distribution method; the source is verifiable and matches the project's official infrastructure, posing minimal risk despite the untrusted host flag.
Triggered rules
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's own GitHub releases, which is a normal distribution method; the source is verifiable and matches the project's official infrastructure, posing minimal risk despite the untrusted host flag.
PKGBUILD
1
# Maintainer: Ayan De <deayan252@gmail.com>
2
pkgname=tokentracker-bin
3
pkgver=0.1.11
4
pkgrel=1
5
# the .deb is attached to a release tag that may differ from pkgver
6
_tag=v0.1.12
7
pkgdesc="AI provider quota monitor — track usage, rate limits, and spend across 40+ LLM providers"
8
arch=('x86_64')
9
url="https://github.com/ayan-de/Token-Tracker"
10
license=('MIT')
11
depends=('webkit2gtk-4.1' 'gtk3' 'libayatana-appindicator')
12
provides=('tokentracker')
13
conflicts=('tokentracker')
14
options=('!strip')
15
source=("$pkgname-$pkgver.deb::$url/releases/download/$_tag/TokenTracker_${pkgver}_amd64.deb")
16
sha256sums=('f3d37bd56843d90025448a77a9d0667f35de636ce87dd9d142ab304d5cfeff70')
17
18
package() {
19
bsdtar -xf data.tar.gz -C "$pkgdir"
20
}
21
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 13:35:00 | LOW | 2 |