visor

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

The static rules flagged this HIGH, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 82%): The PKGBUILD itself is straightforward: it downloads a tagged release tarball from GitHub, builds it with make, and installs the resulting files. There is no obfuscation, no encoded payload, and no remote code execution in the build or package steps. The .install file only prints informational messages; it does not execute any remote code. The flagged 'remote download executed by a shell' is a curl|sh command shown in an echo string as a suggested optional post-install step for users who want a one-shot installer — it is never actually executed by the .install script itself. The md5sums='SKIP' is sloppy but not malicious. The package is low-votes and recently uploaded, which is a social signal but not a technical one. Overall this is a clean PKGBUILD with minor sloppiness (SKIP checksums, suggesting curl|sh in docs).