xca-rs-bin

LOW

maintainer RinWate 1 votes scanned 2026-09-19 17:30:41.880415

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's GitHub releases, which is not ideal for trust but comes from a legitimate project source under GPL; the risk is mitigated by the project's transparency and license, though lack of compilation from source limits verifiability.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's GitHub releases, which is not ideal for trust but comes from a legitimate project source under GPL; the risk is mitigated by the project's transparency and license, though lack of compilation from source limits verifiability.

PKGBUILD

      1# Maintainer: Denis "RinWate" Egorov <rinwate@yandex.ru>
    
      2# Prebuilt binary package: downloads the release asset instead of
    
      3# compiling. The binary is built by CI-less release automation from the
    
      4# same tag; sources live in the project repository (GPL).
    
      5# Before the first upload: refresh .SRCINFO (makepkg --printsrcinfo).
    
      6
    
      7pkgname=xca-rs-bin
    
      8pkgver=0.2.2
    
      9pkgrel=1
    
      10pkgdesc="XCA (X Certificate and Key Management) rewritten in Rust with GTK4 and GOST support — prebuilt binary"
    
      11arch=('x86_64')
    
      12url="https://github.com/RinWate/xca-rs"
    
      13license=('GPL-2.0-or-later')
    
      14depends=('gtk4' 'libadwaita' 'openssl' 'openssl-gost-engine' 'glib2' 'glibc')
    
      15provides=("${pkgname%-bin}=$pkgver")
    
      16conflicts=("${pkgname%-bin}")
    
      17source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/xca-rs-$pkgver-x86_64.tar.gz")
    
      18sha256sums=('26194f368b443ac4901c17ee2c24f4958b85e4dd819808c02a370468b9e1c15c')
    
      19
    
      20_dir="xca-rs-$pkgver-x86_64"
    
      21
    
      22package() {
    
      23    cd "$_dir"
    
      24    install -Dm755 xca-rs -t "$pkgdir/usr/bin"
    
      25    install -Dm644 org.xca.rs.desktop -t "$pkgdir/usr/share/applications"
    
      26    install -Dm644 org.xca.rs.svg -t "$pkgdir/usr/share/icons/hicolor/scalable/apps"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-19 17:30:41	Low	2