topf (CLEAN) - AURWatch

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from official source code hosted on GitHub under the PostFinance organization, with a verifiable checksum; no untrusted or executable remote content is involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Malte Linke <me@parzival.space>
    
      2
    
      3pkgname=topf
    
      4pkgdesc='Talos orchestrator by PostFinance'
    
      5pkgdesc='Talos orchestrator by PostFinance'
    
      6pkgver=0.6.0 # renovate: datasource=github-tags depName=postfinance/topf versioning=semver
    
      7pkgrel=1
    
      8arch=('x86_64')
    
      9url="https://github.com/postfinance/topf"
    
      10license=('MIT')
    
      11provides=('topf')
    
      12conflicts=('topf')
    
      13depends=() # no dependencies, not a dynamic executable
    
      14makedepends=(go)
    
      15
    
      16source=("${pkgname}-${pkgver}.tar.gz::https://github.com/postfinance/topf/archive/refs/tags/v${pkgver}.tar.gz")
    
      17sha256sums=('b3e62f9e2265632c838250f45973788dc60a11a7dd6daa2f01a43e0a37edab3a')
    
      18
    
      19build() {
    
      20  cd "${srcdir}/${pkgname}-${pkgver}"
    
      21  go build -trimpath -ldflags "-X main.version=${pkgver}" -o bin/topf ./cmd/topf
    
      22}
    
      23
    
      24package() {
    
      25  install -Dm755 "${srcdir}/${pkgname}-${pkgver}/bin/topf" "${pkgdir}/usr/bin/topf"
    
      26  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 00:22:44	Clean	2
2026-09-09 23:20:11	Low	1