winkel-bin
LOW
maintainer douglasdemoura
0 votes
scanned 2026-09-15 21:20:38.565393
Why flagged
The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice for AUR packages; the source is verifiable via checksums and hosted on an official platform, posing no inherent risk.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's own GitHub releases, which is a normal practice for AUR packages; the source is verifiable via checksums and hosted on an official platform, posing no inherent risk.
PKGBUILD
1
# Maintainer: Douglas Moura <doug@douglasmoura.com>
2
pkgname=winkel-bin
3
_pkgname=winkel
4
pkgver=0.1.1
5
pkgrel=1
6
pkgdesc="A metronome for Omarchy that follows the live theme (prebuilt binary)"
7
arch=(x86_64 aarch64)
8
url="https://github.com/DouglasdeMoura/winkel"
9
license=(MIT)
10
depends=(quickshell alsa-lib gcc-libs glibc hicolor-icon-theme)
11
optdepends=('ttf-jetbrains-mono-nerd: the default interface font')
12
provides=("$_pkgname")
13
conflicts=("$_pkgname")
14
source_x86_64=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-x86_64-linux.tar.gz")
15
source_aarch64=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-aarch64-linux.tar.gz")
16
sha256sums_x86_64=('13a6af84d9ad4f72f64491571ed9b36b8cc8be1b3336d10a3e4d3f1ab6227501')
17
sha256sums_aarch64=('cf3a20b604b7a5ae89ad6640454e532d836d5099fd9d6232870bb3c58bd2c2c2')
18
19
package() {
20
cd "$_pkgname-$pkgver-$CARCH-linux"
21
make install PREFIX=/usr DESTDIR="$pkgdir"
22
}
23
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-15 21:20:38 | Low | 2 |