treemd-bin

LOW

maintainer orphaned 1 votes scanned 2026-08-26 01:28:49.644801

View on AUR

Why flagged

The package downloads prebuilt binaries from GitHub releases, which is a supply-chain risk if the author's account is compromised, but the binaries are from the official project repository and checksums are provided, limiting impact.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from GitHub releases, which is a supply-chain risk if the author's account is compromised, but the binaries are from the official project repository and checksums are provided, limiting impact.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_gitauthor=Epistates
    
      4_gitname=treemd
    
      5_appname=${_gitname}
    
      6pkgname=${_appname}-bin
    
      7pkgdesc="A markdown navigator with tree-based structural navigation"
    
      8
    
      9pkgver=0.7.0
    
      10pkgrel=1
    
      11_gitversion=v${pkgver}
    
      12
    
      13arch=('x86_64' 'aarch64')
    
      14_barch=('x86_64-unknown-linux-gnu' 'aarch64-unknown-linux-gnu')
    
      15
    
      16_ghurl="https://github.com/${_gitauthor}/${_gitname}"
    
      17_ghurlraw="https://raw.githubusercontent.com/${_gitauthor}/${_gitname}/${_gitversion}"
    
      18url=${_ghurl}
    
      19
    
      20license=('Apache-2.0' 'MIT')
    
      21
    
      22provides=("${_appname}")
    
      23conflicts=("${_appname}")
    
      24depends=('glibc' 'libgcc' 'oniguruma')
    
      25
    
      26options=(!strip)
    
      27
    
      28source=("LICENSE-${pkgver}::${_ghurlraw}/LICENSE"
    
      29		"README-${pkgver}.md::${_ghurlraw}/README.md")
    
      30source_x86_64=("${_appname}-${arch[0]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[0]}.tar.gz")
    
      31source_aarch64=("${_appname}-${arch[1]}-${pkgver}.tgz::${_ghurl}/releases/download/${_gitversion}/${_appname}-${_barch[1]}.tar.gz")
    
      32sha256sums=('0a2496502420c25264adbbe706b07da2d37a83d08d4241284e8229e23a46538e'
    
      33            '5fe97f84bf34fbb48bb85bd390c61d5d145f2ffe624e162de9f2fc671157b4d1')
    
      34sha256sums_x86_64=('1abeb617f1e2fd466fdd455633d313db170c451107411c66c097038fe0de3c2a')
    
      35sha256sums_aarch64=('094b2976c4a57b1f9d7e3ce10636829d81f8354ef42e0986e19c91a088add4d7')
    
      36
    
      37
    
      38case ${CARCH} in
    
      39  ${arch[0]})
    
      40    _CARCH=${_barch[0]}
    
      41    ;;
    
      42
    
      43  ${arch[1]})
    
      44    _CARCH=${_barch[1]}
    
      45    ;;
    
      46esac
    
      47
    
      48package() {
    
      49	cd "${srcdir}/" || exit
    
      50
    
      51	install -Dm755 "${_appname}-${_CARCH}" "${pkgdir}/usr/bin/${_appname}"
    
      52
    
      53	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      54
    
      55	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      56}
    
      57
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-26 01:28:49	Low	2