topowall

LOW

maintainer ThankfulKoala 0 votes scanned 2026-09-27 17:19:13.301701

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's GitHub releases, which is a common but unverifiable practice; however, it installs only a single executable and license file with no evidence of malicious behavior or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's GitHub releases, which is a common but unverifiable practice; however, it installs only a single executable and license file with no evidence of malicious behavior or remote code execution.

PKGBUILD

      1# Maintainer: ThankfulKoala <archlinux.dastardly615@simplelogin.com>
    
      2pkgname=topowall
    
      3pkgver=0.3.0
    
      4pkgrel=1
    
      5pkgdesc="Topographic contour wallpapers from real elevation data, rendered on the GPU"
    
      6arch=('x86_64')
    
      7url="https://github.com/gonzalezerik/topowall"
    
      8license=('MIT')
    
      9depends=('glibc>=2.35' 'libgcc')
    
      10options=(!debug)
    
      11source=("$pkgname-$pkgver.tar.gz::https://github.com/gonzalezerik/topowall/releases/download/v$pkgver/topowall-$arch-unknown-linux-gnu.tar.gz")
    
      12sha256sums=('21482127d24f1c2088057435b578a5f5c546fb13cf30b2b07d1d8dc7f4fa04cb')
    
      13
    
      14package() {
    
      15	cd "$pkgname-$arch-unknown-linux-gnu"
    
      16	install -Dm755 ./topowall "$pkgdir/usr/bin/topowall"
    
      17	install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      18}
    
      19

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 17:19:13	Low	2
2026-09-27 15:19:08	Low	2