ultra-9000-bin

LOW

maintainer yasen 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package rehosts a prebuilt Arch package from the project's own GitHub release; while the binary artifact is unverifiable, it originates from the project's official infrastructure, and the checksum is provided, limiting supply-chain risk to compromise of the GitHub account.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package rehosts a prebuilt Arch package from the project's own GitHub release; while the binary artifact is unverifiable, it originates from the project's official infrastructure, and the checksum is provided, limiting supply-chain risk to compromise of the GitHub account.

PKGBUILD

      1# Maintainer: Yasen Pavlov <yasen.pavlov+aur@bitnet.me>
    
      2#
    
      3# AUR binary package: repackages the Arch package attached to the GitHub release (built
    
      4# from the tagged commit by the release workflow). Generated from
    
      5# https://github.com/yasen-pavlov/ultra_9000/tree/main/packaging/aur, which fills in pkgver,
    
      6# pkgrel and sha256sums (from the release's SHA256SUMS.txt) for every release; change the
    
      7# template there, not on the AUR.
    
      8
    
      9pkgname=ultra-9000-bin
    
      10_pkgname=ultra-9000
    
      11pkgver=0.5.0
    
      12pkgrel=1
    
      13pkgdesc='Agent harness with native Alacritty terminals in a Tauri/Svelte interface (prebuilt)'
    
      14arch=('x86_64')
    
      15url='https://github.com/yasen-pavlov/ultra_9000'
    
      16license=('MIT OR Apache-2.0')
    
      17# Every library the binary links directly, plus librsvg, libxkbcommon, mesa (EGL) and
    
      18# wayland, which it loads at runtime (namcap reports those four as possibly unneeded).
    
      19depends=(
    
      20  'cairo'
    
      21  'dbus'
    
      22  'fontconfig'
    
      23  'freetype2'
    
      24  'gdk-pixbuf2'
    
      25  'glib2'
    
      26  'glibc'
    
      27  'gtk3'
    
      28  'hicolor-icon-theme'
    
      29  'libgcc'
    
      30  'librsvg'
    
      31  'libsoup3'
    
      32  'libxkbcommon'
    
      33  'mesa'
    
      34  'pango'
    
      35  'wayland'
    
      36  'webkit2gtk-4.1'
    
      37)
    
      38provides=("$_pkgname=$pkgver")
    
      39conflicts=("$_pkgname")
    
      40options=('!strip' '!debug')
    
      41# The release's package always has pkgrel 1.
    
      42_asset="$_pkgname-$pkgver-1-x86_64.pkg.tar.zst"
    
      43source=("$url/releases/download/v$pkgver/$_asset")
    
      44noextract=("$_asset")
    
      45sha256sums=('6674e155a9530650c5f1bcd627afa55592b8a144f8d492b18f7512055db4af2e')
    
      46
    
      47package() {
    
      48  bsdtar -xf "$srcdir/$_asset" -C "$pkgdir" \
    
      49    --exclude .PKGINFO --exclude .BUILDINFO --exclude .MTREE --exclude .INSTALL
    
      50  mv "$pkgdir/usr/share/licenses/$_pkgname" "$pkgdir/usr/share/licenses/$pkgname"
    
      51}
    
      52

Changes since previous scan

--- PKGBUILD @ 2026-10-13 00:23
+++ PKGBUILD @ 2026-10-17 00:21
@@ -8,7 +8,7 @@
 
 pkgname=ultra-9000-bin
 _pkgname=ultra-9000
-pkgver=0.3.0
+pkgver=0.5.0
 pkgrel=1
 pkgdesc='Agent harness with native Alacritty terminals in a Tauri/Svelte interface (prebuilt)'
 arch=('x86_64')
@@ -42,7 +42,7 @@
 _asset="$_pkgname-$pkgver-1-x86_64.pkg.tar.zst"
 source=("$url/releases/download/v$pkgver/$_asset")
 noextract=("$_asset")
-sha256sums=('527f6c99e88469ec927ffecda7f97972221f165eecb43f89d49c22f85850b474')
+sha256sums=('6674e155a9530650c5f1bcd627afa55592b8a144f8d492b18f7512055db4af2e')
 
 package() {
   bsdtar -xf "$srcdir/$_asset" -C "$pkgdir" \

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 21:16:13	Low	2
2026-10-13 00:23:45	Clean	2
2026-10-12 01:11:47	Low	1
2026-10-12 00:18:51	Low	2
2026-10-11 05:10:24	Low	2
2026-10-11 00:26:05	Low	2
2026-10-11 00:16:25	Low	2
2026-10-10 12:14:12	Low	2
2026-10-10 08:13:38	Low	2