uutils-util-linux
The package builds from source hosted on the project's official GitHub repository, which is normal for AUR packages; the low severity is due to the unverifiable source (SKIP'd checksum) and few votes, but it does not execute untrusted prebuilt code or exfiltrate data.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's official GitHub repository, which is normal for AUR packages; the low severity is due to the unverifiable source (SKIP'd checksum) and few votes, but it does not execute untrusted prebuilt code or exfiltrate data.
PKGBUILD
# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
pkgname=uutils-util-linux
pkgver=0.0.1
pkgrel=1
pkgdesc="Rust reimplementation of the util-linux project"
arch=('i686' 'x86_64')
url="https://github.com/uutils/util-linux"
license=('MIT')
depends=('glibc' 'libgcc')
makedepends=('cargo')
source=("$pkgname-$pkgver-src.tar.gz::https://github.com/uutils/util-linux/archive/refs/tags/$pkgver.tar.gz")
sha256sums=('SKIP')
prepare() {
cd "util-linux-$pkgver"
if [ ! -f "Cargo.lock" ]; then
cargo update
fi
cargo fetch
}
check() {
cd "util-linux-$pkgver"
#cargo test \
# --frozen
}
package() {
cd "util-linux-$pkgver"
cargo install \
--frozen \
--no-track \
--root "$pkgdir/usr" \
--path .
install -Dm644 "LICENSE" -t "$pkgdir/usr/share/licenses/uutils-util-linux"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-11 15:22:58 | Low | 2 |