ultra-9000

CLEAN

maintainer yasen 0 votes scanned 2026-10-23 00:02:19.781852

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from source hosted on the project's own GitHub repository, uses standard build tools, and installs only the resulting binary, desktop file, icons, and license data; no remote code execution or untrusted payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Yasen Pavlov <yasen.pavlov+aur@bitnet.me>
    
      2#
    
      3# AUR source package: builds the tagged release. Generated from
    
      4# https://github.com/yasen-pavlov/ultra_9000/tree/main/packaging/aur, which fills in pkgver,
    
      5# pkgrel and sha256sums for every release; change the template there, not on the AUR.
    
      6
    
      7pkgname=ultra-9000
    
      8pkgver=0.6.0
    
      9pkgrel=1
    
      10pkgdesc='Agent harness with native Alacritty terminals in a Tauri/Svelte interface'
    
      11arch=('x86_64')
    
      12url='https://github.com/yasen-pavlov/ultra_9000'
    
      13license=('MIT OR Apache-2.0')
    
      14# Every library the binary links directly, plus librsvg, libxkbcommon, mesa (EGL) and
    
      15# wayland, which it loads at runtime (namcap reports those four as possibly unneeded).
    
      16depends=(
    
      17  'cairo'
    
      18  'dbus'
    
      19  'fontconfig'
    
      20  'freetype2'
    
      21  'gdk-pixbuf2'
    
      22  'glib2'
    
      23  'glibc'
    
      24  'gtk3'
    
      25  'hicolor-icon-theme'
    
      26  'libgcc'
    
      27  'librsvg'
    
      28  'libsoup3'
    
      29  'libxkbcommon'
    
      30  'mesa'
    
      31  'pango'
    
      32  'wayland'
    
      33  'webkit2gtk-4.1'
    
      34)
    
      35makedepends=('bun' 'cargo')
    
      36# !lto: makepkg's C LTO flags do not mix with rustc-linked objects of the -sys crates.
    
      37# !debug: the release profile keeps line tables (debug = 1); they stay in the binary
    
      38# instead of a separate -debug package.
    
      39options=('!lto' '!debug')
    
      40source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
    
      41sha256sums=('7f4db09a27d8f85bb7ca6d7d485adc00315d53b3b05bbd767c6c282faac1dc6f')
    
      42
    
      43prepare() {
    
      44  cd "ultra_9000-$pkgver"
    
      45  export RUSTUP_TOOLCHAIN=stable
    
      46  # The repository keeps the 0.0.0 placeholder; releases stamp the tag's version.
    
      47  bun scripts/set-version.ts "$pkgver"
    
      48  bun install --frozen-lockfile
    
      49  cargo fetch --locked --manifest-path src-tauri/Cargo.toml \
    
      50    --target "$(rustc -vV | sed -n 's/^host: //p')"
    
      51}
    
      52
    
      53build() {
    
      54  cd "ultra_9000-$pkgver"
    
      55  export RUSTUP_TOOLCHAIN=stable
    
      56  # Panic locations of the vendored path crates and build-script outputs would otherwise
    
      57  # embed the build directory.
    
      58  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=$srcdir=/usr/src/$pkgname"
    
      59  bun run tauri build --no-bundle -- --frozen
    
      60}
    
      61
    
      62package() {
    
      63  cd "ultra_9000-$pkgver"
    
      64  install -Dm755 src-tauri/target/release/ultra9000 "$pkgdir/usr/bin/ultra9000"
    
      65  install -Dm644 packaging/linux/ultra9000.desktop "$pkgdir/usr/share/applications/ultra9000.desktop"
    
      66
    
      67  local icon
    
      68  for icon in src-tauri/icons/hicolor/*/apps/ultra-9000.*; do
    
      69    install -Dm644 "$icon" "$pkgdir/usr/share/icons/${icon#src-tauri/icons/}"
    
      70  done
    
      71
    
      72  local licenses="$pkgdir/usr/share/licenses/$pkgname"
    
      73  install -Dm644 -t "$licenses" LICENSE-MIT LICENSE-APACHE THIRD_PARTY_NOTICES.md
    
      74  install -Dm644 -t "$licenses/vendor" vendor/LICENSE-MIT vendor/LICENSE-APACHE vendor/PROVENANCE.md
    
      75}
    
      76

Changes since previous scan

--- PKGBUILD @ 2026-10-17 00:21
+++ PKGBUILD @ 2026-10-23 00:02
@@ -5,7 +5,7 @@
 # pkgrel and sha256sums for every release; change the template there, not on the AUR.
 
 pkgname=ultra-9000
-pkgver=0.5.0
+pkgver=0.6.0
 pkgrel=1
 pkgdesc='Agent harness with native Alacritty terminals in a Tauri/Svelte interface'
 arch=('x86_64')
@@ -38,7 +38,7 @@
 # instead of a separate -debug package.
 options=('!lto' '!debug')
 source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
-sha256sums=('1eeca3716859d5207fdf6f20624280ad2c5e181766cdcfcaf672ec3a46ba30b4')
+sha256sums=('7f4db09a27d8f85bb7ca6d7d485adc00315d53b3b05bbd767c6c282faac1dc6f')
 
 prepare() {
   cd "ultra_9000-$pkgver"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 00:02:19	Clean	2
2026-10-22 01:33:44	Low	1
2026-10-17 00:21:55	Clean	2
2026-10-16 21:16:13	Low	1
2026-10-13 00:23:45	Clean	2
2026-10-12 01:11:47	Low	1
2026-10-12 00:18:51	Clean	2
2026-10-11 05:10:24	Low	1
2026-10-11 00:26:05	Clean	2
2026-10-11 00:16:25	Low	1
2026-10-10 12:14:12	Low	1
2026-10-10 08:13:38	Low	1