uutils-coreutils-bin

LOW

maintainer Chocobo1 0 votes scanned 2026-09-02 19:51:22.089411

View on AUR

Why flagged

The package downloads prebuilt binaries from the official GitHub releases of a legitimate open-source project; while checksums are provided for binaries, the license file has a SKIP'd checksum but is non-executable data, posing minimal risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the official GitHub releases of a legitimate open-source project; while checksums are provided for binaries, the license file has a SKIP'd checksum but is non-executable data, posing minimal risk.

PKGBUILD

      1# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
    
      2
    
      3pkgname=uutils-coreutils-bin
    
      4pkgver=0.11.0
    
      5pkgrel=1
    
      6pkgdesc="Cross-platform Rust rewrite of the GNU coreutils (upstream PGO optimized)"
    
      7arch=('aarch64' 'arm' 'i686' 'x86_64')
    
      8url="https://uutils.org/"
    
      9license=('MIT')
    
      10provides=("uutils-coreutils=$pkgver")
    
      11conflicts=('uutils-coreutils')
    
      12source=("$pkgname-$pkgver-LICENSE::https://raw.githubusercontent.com/uutils/coreutils/refs/heads/main/LICENSE")
    
      13source_aarch64=("$pkgname-$pkgver-aarch64.tar.gz::https://github.com/uutils/coreutils/releases/download/$pkgver/coreutils-$pkgver-aarch64-unknown-linux-musl.tar.gz")
    
      14source_arm=("$pkgname-$pkgver-arm.tar.gz::https://github.com/uutils/coreutils/releases/download/$pkgver/coreutils-$pkgver-arm-unknown-linux-gnueabihf.tar.gz")
    
      15source_i686=("$pkgname-$pkgver-i686.tar.gz::https://github.com/uutils/coreutils/releases/download/$pkgver/coreutils-$pkgver-i686-unknown-linux-musl.tar.gz")
    
      16source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::https://github.com/uutils/coreutils/releases/download/$pkgver/coreutils-$pkgver-x86_64-unknown-linux-musl.tar.gz")
    
      17sha256sums=('SKIP')
    
      18sha256sums_aarch64=('99405c97458c4b10382d8570108519188b5410a0e0e380c74b77ca7bf7efd322')
    
      19sha256sums_arm=('e9ff18aa4cb10aa9939e96f1d5e4284f3117dee49cac90e916640e2e913b0b7e')
    
      20sha256sums_i686=('37ecad40934d210221e720f36705d568f4e0e28578d47fc10e2a93f96603d49e')
    
      21sha256sums_x86_64=('ac8e24885abf9062b80e8e86990d5727c186939c02fee777b1723e5c85293ca9')
    
      22
    
      23
    
      24package() {
    
      25  cd "coreutils-$pkgver-$CARCH-"*
    
      26
    
      27  install -Dm755 "coreutils" "$pkgdir/usr/bin/uu-coreutils"
    
      28
    
      29  while IFS= read -r line; do
    
      30    ln -s "/usr/bin/uu-coreutils" "$pkgdir/usr/bin/uu-$line"
    
      31  done < <("$pkgdir/usr/bin/uu-coreutils" --list)
    
      32
    
      33  install -Dm644 "$srcdir/$pkgname-$pkgver-LICENSE" "$pkgdir/usr/share/licenses/uutils-coreutils/LICENSE"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 19:51:22	Low	2