upmd
LOW
maintainer Ateles
0 votes
scanned 2026-10-24 00:14:55.209548
Why flagged
The package builds from source using a git checkout from the project's official GitHub repository; the low severity is due to few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source using a git checkout from the project's official GitHub repository; the low severity is due to few votes and recent upload, not due to any malicious or risky behavior in the PKGBUILD.
PKGBUILD
1
# Maintainer: Ateles
2
# shellcheck shell=bash disable=SC2034,SC2154
3
pkgname=upmd
4
pkgver=0.2.7
5
pkgrel=1
6
pkgdesc="Markdown-based task and workflow runner"
7
arch=("x86_64")
8
url="https://github.com/rezigned/upmd"
9
license=("MIT")
10
depends=("gcc-libs")
11
makedepends=("cargo" "git")
12
provides=("upmd")
13
conflicts=("upmd")
14
source=("$pkgname::git+$url#tag=v${pkgver}")
15
sha256sums=("SKIP")
16
options=(!lto)
17
18
build() {
19
cd "$srcdir/$pkgname" || exit 1
20
cargo build --release --config 'profile.release.opt-level="z"' --config 'profile.release.lto=true' --config 'profile.release.codegen-units=1' --config 'profile.release.panic="abort"'
21
}
22
23
package() {
24
cd "$srcdir/$pkgname" || exit 1
25
install -Dm755 "target/release/upmd" "$pkgdir/usr/bin/upmd"
26
install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
27
install -Dm644 "CHANGELOG.md" "$pkgdir/usr/share/doc/$pkgname/CHANGELOG.md"
28
install -Dm644 "README.md" "$pkgdir/usr/share/doc/$pkgname/README.md"
29
install -Dm644 "DEMO.md" "$pkgdir/usr/share/doc/$pkgname/DEMO.md"
30
}
31
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 21:38:30 | Low | 2 |