typeshi-bin
maintainer safalski
· 0 votes
· scanned 2026-08-03 00:08:14.047287
MEDIUM
View on AUR ↗
Why flagged
The package downloads a prebuilt binary from a non-standard, non-whitelisted host (git.safallama.com.np), which is unverifiable and could be silently swapped, posing a supply-chain risk.
Triggered rules
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("$pkgname-$pkgver.tar.gz::https://git.safallama.com.np/safalski/typeShi/releases/download/v$pkgver/typeshi-bin-$pkgver-x86_64.tar.gz")
LOW
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
MEDIUM
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a prebuilt binary from a non-standard, non-whitelisted host (git.safallama.com.np), which is unverifiable and could be silently swapped, posing a supply-chain risk.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: safalski <https://git.safallama.com.np/safalski>
2
pkgname=typeshi-bin
3
pkgver=0.1.6
4
pkgrel=1
5
pkgdesc="A typing application (prebuilt binary)"
6
arch=('x86_64')
7
url="https://git.safallama.com.np/safalski/typeShi"
8
license=('BSD-2-Clause')
9
provides=('typeshi')
10
conflicts=('typeshi')
11
depends=('qt6-base' 'qt6-declarative' 'qt6-shadertools')
12
source=("$pkgname-$pkgver.tar.gz::https://git.safallama.com.np/safalski/typeShi/releases/download/v$pkgver/typeshi-bin-$pkgver-x86_64.tar.gz")
13
sha256sums=('953a678e95c7766cf1deb3a1bd51ff107ef318e57a2a26e97a84d9884321e7a0')
14
package() {
15
install -Dm755 usr/bin/typeshi "$pkgdir/usr/bin/typeshi"
16
install -Dm644 usr/share/applications/typeshi.desktop "$pkgdir/usr/share/applications/typeshi.desktop"
17
install -Dm644 usr/share/icons/hicolor/scalable/apps/typeshi.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/typeshi.svg"
18
}
19
Changes since previous scan
--- PKGBUILD @ 2026-07-31 00:14+++ PKGBUILD @ 2026-08-03 00:08@@ -1,6 +1,6 @@ # Maintainer: safalski <https://git.safallama.com.np/safalski> pkgname=typeshi-bin-pkgver=0.1.5+pkgver=0.1.6 pkgrel=1 pkgdesc="A typing application (prebuilt binary)" arch=('x86_64')@@ -10,7 +10,7 @@ conflicts=('typeshi') depends=('qt6-base' 'qt6-declarative' 'qt6-shadertools') source=("$pkgname-$pkgver.tar.gz::https://git.safallama.com.np/safalski/typeShi/releases/download/v$pkgver/typeshi-bin-$pkgver-x86_64.tar.gz")-sha256sums=('7caddd75c17a5fc87ce28ce23d0bee2cf6d96e8f3eea33312824eb8d0b08254d')+sha256sums=('953a678e95c7766cf1deb3a1bd51ff107ef318e57a2a26e97a84d9884321e7a0') package() { install -Dm755 usr/bin/typeshi "$pkgdir/usr/bin/typeshi" install -Dm644 usr/share/applications/typeshi.desktop "$pkgdir/usr/share/applications/typeshi.desktop"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | MEDIUM | 3 |
| 2026-08-02 00:16:08 | MEDIUM | 3 |
| 2026-08-01 00:11:18 | MEDIUM | 3 |
| 2026-07-31 07:17:22 | MEDIUM | 3 |
| 2026-07-31 00:14:10 | MEDIUM | 3 |
| 2026-07-30 00:17:23 | MEDIUM | 3 |
| 2026-07-29 00:25:53 | MEDIUM | 3 |
| 2026-07-28 00:07:28 | MEDIUM | 3 |
| 2026-07-27 19:35:21 | MEDIUM | 3 |
| 2026-07-27 00:24:32 | MEDIUM | 3 |
| 2026-07-26 07:31:44 | MEDIUM | 3 |
| 2026-07-26 00:07:32 | MEDIUM | 3 |
| 2026-07-25 13:29:48 | MEDIUM | 3 |
| 2026-07-25 00:13:44 | MEDIUM | 3 |
| 2026-07-24 09:27:42 | MEDIUM | 3 |
| 2026-07-24 00:02:28 | MEDIUM | 3 |
| 2026-07-23 09:22:54 | MEDIUM | 3 |
| 2026-07-23 00:14:47 | MEDIUM | 3 |
| 2026-07-22 00:29:32 | MEDIUM | 3 |
| 2026-07-21 00:24:15 | MEDIUM | 3 |