wikistow-cli-bin

LOW

maintainer skint007 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

Package builds from a GitHub release source, which is normal for AUR packages; the source is a JavaScript file intended to run on Node.js, not an obfuscated or remote-executed payload; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a GitHub release source, which is normal for AUR packages; the source is a JavaScript file intended to run on Node.js, not an obfuscated or remote-executed payload; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: skint007 <archlinux.repose742@passmail.net>
    
      2#
    
      3# The command-line client from a GitHub Release, the bundle CI built and
    
      4# tested (docs/releasing.md). The release workflow sets the maintainer's
    
      5# email, _version, pkgrel and the checksum when it publishes this to the AUR.
    
      6# The first release with the CLI's archive is 0.6.0, so this copy has no
    
      7# checksum yet.
    
      8
    
      9# pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.
    
      10_version=0.7.0
    
      11pkgname=wikistow-cli-bin
    
      12pkgver=${_version//-/}
    
      13pkgrel=1
    
      14pkgdesc="Command-line client for your family's encrypted wiki, for people and their agents"
    
      15# One JavaScript file, run on the system Node.
    
      16arch=('any')
    
      17url="https://github.com/skint007/wikistow"
    
      18license=('MIT')
    
      19# The bundle targets Node 26.
    
      20depends=('nodejs>=26')
    
      21optdepends=("libsecret: keep an agent's key in the keyring (agent enroll --secret-store)")
    
      22provides=('wikistow-cli')
    
      23conflicts=('wikistow-cli')
    
      24source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-cli-$_version.tar.gz")
    
      25sha256sums=('db2ccede36d47760cd3ab5418cdd631272983cf41ef47970c774b750d9a53fcd')
    
      26
    
      27package() {
    
      28    cd "wikistow-cli-$_version"
    
      29    install -Dm644 wikistow.mjs "$pkgdir/usr/lib/wikistow-cli/wikistow.mjs"
    
      30    install -Dm755 wikistow "$pkgdir/usr/bin/wikistow"
    
      31    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      32}
    
      33

Changes since previous scan

--- PKGBUILD @ 2026-10-16 15:16
+++ PKGBUILD @ 2026-10-17 00:21
@@ -7,7 +7,7 @@
 # checksum yet.
 
 # pacman sorts a prerelease such as 0.3.0rc.1 before 0.3.0 only without the `-`.
-_version=0.6.0
+_version=0.7.0
 pkgname=wikistow-cli-bin
 pkgver=${_version//-/}
 pkgrel=1
@@ -22,7 +22,7 @@
 provides=('wikistow-cli')
 conflicts=('wikistow-cli')
 source=("https://github.com/skint007/wikistow/releases/download/v$_version/wikistow-cli-$_version.tar.gz")
-sha256sums=('821f45f9a8472ecdfa1771fba88a6abe3b4cb904369b59fba99a7bb098223f4c')
+sha256sums=('db2ccede36d47760cd3ab5418cdd631272983cf41ef47970c774b750d9a53fcd')
 
 package() {
     cd "wikistow-cli-$_version"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 19:16:12	Low	2
2026-10-16 15:16:11	Low	1