uutils-grep-bin

LOW

maintainer e-kwsm 0 votes scanned 2026-09-27 07:16:53.263382

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the low severity is due to the binary nature and unverifiable build process, but the source is from a legitimate project host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; the low severity is due to the binary nature and unverifiable build process, but the source is from a legitimate project host.

PKGBUILD

      1# Maintainer: Eisuke Kawashima <e DOT kawaschima+archlinux AT gmail DOT com>
    
      2
    
      3pkgname='uutils-grep-bin'
    
      4pkgdesc='A Rust implementation of GNU Grep'
    
      5pkgver=0.2.0
    
      6pkgrel=1
    
      7url='https://github.com/uutils/grep'
    
      8arch=(x86_64)
    
      9license=(MIT)
    
      10depends=(glibc libgcc)
    
      11options=('!debug')
    
      12provides=("${pkgname%-bin}=${pkgver}")
    
      13conflicts=("${pkgname%-bin}")
    
      14source_x86_64=("uu_grep-x86_64-unknown-linux-gnu-${pkgver}.tar.xz::${url}/releases/download/${pkgver}/uu_grep-x86_64-unknown-linux-gnu.tar.xz")
    
      15sha256sums_x86_64=('7ffdf7ef9fee0fc07b6a389f14fad0b5236011cf1d08885ffe69f0831f2923e5')
    
      16
    
      17package() {
    
      18  cd uu_grep-x86_64-unknown-linux-gnu
    
      19  install -D -m 0755 grep "${pkgdir}/usr/bin/uu-grep"
    
      20  install -D -m 0644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      21}
    
      22

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 07:16:53	Low	2