unmake-bin

maintainer francoisbeurret · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; the 'recently orphaned and re-adopted' flag does not indicate inherent danger.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; the 'recently orphaned and re-adopted' flag does not indicate inherent danger.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Rafael Dominiquini <rafaeldominiquini at gmail dot com>
    
      2
    
      3_pkgauthor=mcandre
    
      4_pkgname=unmake
    
      5pkgname=${_pkgname}-bin
    
      6pkgver=0.0.26
    
      7pkgrel=1
    
      8_pkgvername=v${pkgver}
    
      9pkgdesc="A makefile linter"
    
      10arch=('x86_64' 'aarch64')
    
      11_barch=('x86_64-unknown-linux-musl' 'aarch64-unknown-linux-musl')
    
      12url="https://github.com/${_pkgauthor}/${_pkgname}"
    
      13_urlraw="https://raw.githubusercontent.com/${_pkgauthor}/${_pkgname}/${_pkgvername}"
    
      14license=('BSD-2-Clause')
    
      15
    
      16provides=("${_pkgname}")
    
      17depends=('glibc' 'gcc-libs')
    
      18conflicts=("${_pkgname}"{,-git})
    
      19
    
      20source=("README-${pkgver}.md::${_urlraw}/README.md"
    
      21        "LICENSE-${pkgver}::${_urlraw}/LICENSE.md")
    
      22source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[0]}.tgz")
    
      23source_aarch64=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}-${_barch[1]}.tgz")
    
      24sha256sums=('a5bd13b1bf00d46e87ea731a7558635f69324de434a0228ab663bb2543c8c074'
    
      25            '9f2df22a75788fa52a08051d56dc8b4f0faa590d4df9213731bb383dd25c165d')
    
      26sha256sums_x86_64=('5675e748981a9ece2db671565549a1a82ab6dcb51eff5bde2dd3061ca5dcad17')
    
      27sha256sums_aarch64=('11bf8154ed09fccaba1bc647985c81a6d57eae40f8b8e530ef72ad3cc3786c21')
    
      28
    
      29package() {
    
      30	cd "${srcdir}/" || exit
    
      31
    
      32	install -Dm755 "${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      33
    
      34	install -Dm644 "README-${pkgver}.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      35
    
      36	install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0