xdman-bin
The package downloads a prebuilt RPM from the project's official GitHub releases, which is then partially extracted; while the binary origin reduces auditability, it comes from the legitimate project source, and no obfuscated or malicious behavior is evident in the PKGBUILD.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 85%): The package downloads a prebuilt RPM from the project's official GitHub releases, which is then partially extracted; while the binary origin reduces auditability, it comes from the legitimate project source, and no obfuscated or malicious behavior is evident in the PKGBUILD.
PKGBUILD
# Maintainer: begin-theadventure <begin-thecontact.ncncb at dralias dot com>
pkgname=xdman-bin
pkgver=9.0.8
pkgrel=1
pkgdesc="Powerfull download accelerator and video downloader (binary release)"
arch=('x86_64')
url="https://github.com/subhra74/xdm"
license=('GPL-3.0-or-later')
depends=('libx11' 'libxext' 'libxrender' 'libxtst' 'libxi' 'freetype2' 'fontconfig' 'ttf-font')
provides=("xdman")
conflicts=("xdman" "xdman-beta-bin")
source=("$url/releases/download/$pkgver/xdm-app-$pkgver-1.x86_64.rpm")
sha256sums=('e3d10a14e62ff0fe15d76b85a24cff6c44b547dba3b6ffaa28922ffa6c2270da')
package() {
mv opt "$pkgdir"
cd usr/share
for i in 16 24 32 48 64 128 256 512; do
install -Dm644 icons/hicolor/${i}x${i}/apps/xdm-app.png -t "$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps"
done
install -Dm644 applications/xdm-app.desktop -t "$pkgdir/usr/share/applications"
install -d "$pkgdir/usr/bin"
ln -s /opt/xdm-app/bin/xdm-app "$pkgdir/usr/bin/xdm-app"
ln -s xdm-app "$pkgdir/usr/bin/xdman"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 21:48:49 | Low | 2 |