uutils-shadow-bin

LOW
maintainer Chocobo1 0 votes scanned 2026-09-11 15:22:58.728112
View on AUR
Why flagged

The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal practice; the skipped checksum for the LICENSE file is harmless as it is non-executable data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal practice; the skipped checksum for the LICENSE file is harmless as it is non-executable data.

PKGBUILD

1# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
2
3pkgname=uutils-shadow-bin
4pkgver=0.5.0
5pkgrel=1
6pkgdesc="A memory-safe reimplementation of the Linux shadow-utils in Rust"
7arch=('aarch64' 'x86_64')
8url="https://github.com/uutils/shadow"
9license=('MIT')
10depends=('glibc' 'libgcc' 'libxcrypt-compat' 'pam')
11provides=("uutils-shadow=$pkgver")
12conflicts=('uutils-shadow')
13source=("$pkgname-$pkgver-LICENSE::https://raw.githubusercontent.com/uutils/shadow/refs/heads/main/LICENSE")
14source_aarch64=("$pkgname-$pkgver-aarch64::https://github.com/uutils/shadow/releases/download/0.5.0/uu_shadow-aarch64-unknown-linux-gnu.tar.gz")
15source_x86_64=("$pkgname-$pkgver-x86_64::https://github.com/uutils/shadow/releases/download/0.5.0/uu_shadow-x86_64-unknown-linux-gnu.tar.gz")
16sha256sums=('SKIP')
17sha256sums_aarch64=('97bdc077fa0f5964867c1e87d7e8d153c8d054c0b1e70ee107447ff08d7025f6')
18sha256sums_x86_64=('1d9c5069e9849b084815b5d46ee112ca78240533f553a3aca438fd5ee4ab083d')
19
20
21package() {
22 install -Dm755 "$srcdir/uu_shadow-$CARCH-unknown-linux-gnu/shadow-rs" -t "$pkgdir/usr/bin"
23 install -Dm644 "$pkgname-$pkgver-LICENSE" "$pkgdir/usr/share/licenses/uutils-shadow/LICENSE"
24}
25

Scan history

Scanned at (UTC)SeverityRules
2026-09-11 15:22:58 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion