usagestat-alpha-bin

LOW
maintainer hashimkarim 0 votes scanned 2026-09-09 01:18:32.135718
View on AUR
Why flagged

The package downloads a prebuilt binary from the project's own GitHub releases, which is a normal AUR practice; the low severity is due to the binary nature and unverifiable source, but it comes from the official project repository with a matching checksum.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's own GitHub releases, which is a normal AUR practice; the low severity is due to the binary nature and unverifiable source, but it comes from the official project repository with a matching checksum.

PKGBUILD

1# Maintainer: Hashim-K <Hashim-K@users.noreply.github.com>
2
3pkgname=usagestat-alpha-bin
4_upstream_version=2.0.0-alpha.1
5pkgver=2.0.0alpha.1
6pkgrel=1
7pkgdesc="Scriptable CLI for local agent usage data"
8arch=("x86_64")
9url="https://github.com/Hashim-K/usagestat"
10license=("MIT")
11depends=("glibc>=2.39")
12provides=("usagestat")
13conflicts=("usagestat")
14source_x86_64=("usagestat-${_upstream_version}-linux-x86_64.tar.gz::${url}/releases/download/v${_upstream_version}/usagestat-linux-x86_64.tar.gz")
15sha256sums_x86_64=("f18b97f82d6448b79cb64f93ebfe1851daf0733bdfe3bc7f82563a899f7e5284")
16
17package() {
18 install -Dm755 "${srcdir}/usagestat" "${pkgdir}/usr/bin/usagestat"
19 if [[ -f "${srcdir}/usagestatd" ]]; then
20 install -Dm755 "${srcdir}/usagestatd" "${pkgdir}/usr/bin/usagestatd"
21 fi
22 install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
23 mkdir -p "${pkgdir}/usr/share/usagestat"
24 cp -a "${srcdir}/plugins" "${pkgdir}/usr/share/usagestat/"
25}
26

Scan history

Scanned at (UTC)SeverityRules
2026-09-09 01:18:32 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion