xget

LOW

maintainer den23513 0 votes scanned 2026-09-20 17:33:19.607430

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the lack of source build and recent upload with few votes, but the binary's checksum is verified and the project is legitimate.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and expected practice; the low severity is due to the lack of source build and recent upload with few votes, but the binary's checksum is verified and the project is legitimate.

PKGBUILD

      1pkgname=xget
    
      2pkgver=1.0.1
    
      3pkgrel=1
    
      4pkgdesc="A universal CLI downloader written in Rust"
    
      5arch=('x86_64')
    
      6url='https://github.com/denix666/xget'
    
      7license=('MIT')
    
      8depends=('bash-completion')
    
      9optdepends=(
    
      10    'zsh: zsh shell completions'
    
      11    'fish: fish shell completions'
    
      12)
    
      13
    
      14source=("https://github.com/denix666/xget/releases/download/v${pkgver}/xget_linux_x86_64.tar.gz")
    
      15
    
      16package() {
    
      17    install -Dm755 "${srcdir}/xget" "${pkgdir}/usr/bin/xget"
    
      18
    
      19    "${srcdir}/xget" --completions bash |
    
      20        install -Dm644 /dev/stdin "${pkgdir}/usr/share/bash-completion/completions/xget"
    
      21
    
      22    "${srcdir}/xget" --completions zsh |
    
      23        install -Dm644 /dev/stdin "${pkgdir}/usr/share/zsh/site-functions/_xget"
    
      24
    
      25    "${srcdir}/xget" --completions fish |
    
      26        install -Dm644 /dev/stdin "${pkgdir}/usr/share/fish/vendor_completions.d/xget.fish"
    
      27}
    
      28sha256sums=('0aa5a7155389e9c7c2cdf1a1f35097317a909cc7cbaa8d236237a0ce6deb7ab4')
    
      29

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-20 17:33:19	Low	2