xdman-bin

LOW
maintainer begin-theadventu 0 votes scanned 2026-10-27 21:48:49.990097
View on AUR
Why flagged

The package downloads a prebuilt RPM from the project's official GitHub releases, which is then partially extracted; while the binary origin reduces auditability, it comes from the legitimate project source, and no obfuscated or malicious behavior is evident in the PKGBUILD.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 85%): The package downloads a prebuilt RPM from the project's official GitHub releases, which is then partially extracted; while the binary origin reduces auditability, it comes from the legitimate project source, and no obfuscated or malicious behavior is evident in the PKGBUILD.

PKGBUILD

1# Maintainer: begin-theadventure <begin-thecontact.ncncb at dralias dot com>
2
3pkgname=xdman-bin
4pkgver=9.0.8
5pkgrel=1
6pkgdesc="Powerfull download accelerator and video downloader (binary release)"
7arch=('x86_64')
8url="https://github.com/subhra74/xdm"
9license=('GPL-3.0-or-later')
10depends=('libx11' 'libxext' 'libxrender' 'libxtst' 'libxi' 'freetype2' 'fontconfig' 'ttf-font')
11provides=("xdman")
12conflicts=("xdman" "xdman-beta-bin")
13source=("$url/releases/download/$pkgver/xdm-app-$pkgver-1.x86_64.rpm")
14sha256sums=('e3d10a14e62ff0fe15d76b85a24cff6c44b547dba3b6ffaa28922ffa6c2270da')
15
16package() {
17 mv opt "$pkgdir"
18 cd usr/share
19 for i in 16 24 32 48 64 128 256 512; do
20 install -Dm644 icons/hicolor/${i}x${i}/apps/xdm-app.png -t "$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps"
21 done
22 install -Dm644 applications/xdm-app.desktop -t "$pkgdir/usr/share/applications"
23 install -d "$pkgdir/usr/bin"
24 ln -s /opt/xdm-app/bin/xdm-app "$pkgdir/usr/bin/xdm-app"
25 ln -s xdm-app "$pkgdir/usr/bin/xdman"
26}
27

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 21:48:49 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion