typepper
The package builds from a legitimate source tarball hosted on GitHub, which is a standard practice; the only concern is a skipped checksum, which reduces verifiability but does not introduce active risk since the code is open and auditable.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate source tarball hosted on GitHub, which is a standard practice; the only concern is a skipped checksum, which reduces verifiability but does not introduce active risk since the code is open and auditable.
PKGBUILD
# Maintainer: vaishnav <vaishnav.sabari.girish@gmail.com>
pkgname=typepper
pkgver=0.2.0
pkgrel=2
pkgdesc='A spicy little typing game for your terminal and browser'
arch=('x86_64' 'aarch64')
url='https://typepper.com/'
license=('GPL-3.0-or-later')
depends=('gcc-libs' 'glibc')
makedepends=('cargo')
options=('!lto')
source=("$pkgname-$pkgver.tar.gz::https://github.com/leodiegues/typepper/archive/refs/tags/v$pkgver.tar.gz")
# Run `updpkgsums` to fill this in.
sha256sums=('SKIP')
prepare() {
cd "$pkgname-$pkgver"
export RUSTUP_TOOLCHAIN=stable
cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
}
build() {
cd "$pkgname-$pkgver"
export RUSTUP_TOOLCHAIN=stable
export CARGO_TARGET_DIR=target
cargo build --frozen --release
}
check() {
cd "$pkgname-$pkgver"
export RUSTUP_TOOLCHAIN=stable
export CARGO_TARGET_DIR=target
cargo test --frozen
}
package() {
cd "$pkgname-$pkgver"
install -Dm755 "target/release/$pkgname" "$pkgdir/usr/bin/$pkgname"
install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
install -Dm644 CHANGELOG.md "$pkgdir/usr/share/doc/$pkgname/CHANGELOG.md"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-19 07:24:05 | Low | 2 |