yafst-bin

LOW

maintainer Wolfhound 0 votes scanned 2026-09-11 19:23:32.946823

View on AUR

Why flagged

The package downloads prebuilt binaries from the project's own release infrastructure on a self-hosted forge; while the host is not a common whitelist entry, it is plausibly official, and the binaries are checksummed, reducing risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's own release infrastructure on a self-hosted forge; while the host is not a common whitelist entry, it is plausibly official, and the binaries are checksummed, reducing risk.

PKGBUILD

      1# Maintainer: Wolfhound <aur at wolfhound dot dev>
    
      2# Rendered by packaging/publish-aur.sh from packaging/aur/yafst-bin/PKGBUILD.in
    
      3# on every tagged release. Edit the template in the yafst repo, not the AUR copy.
    
      4pkgname=yafst-bin
    
      5_tag=v0.2.0-beta.3
    
      6pkgver=0.2.0beta.3
    
      7pkgrel=1
    
      8pkgdesc="Linux-first ranked stats tracker for THE FINALS"
    
      9arch=('x86_64' 'aarch64')
    
      10url="https://forge.wolfhound.dev/wolfhound/yafst"
    
      11license=('MIT')
    
      12depends=('hicolor-icon-theme')
    
      13optdepends=('xdg-utils: open the dashboard in your browser on start')
    
      14provides=('yafst')
    
      15conflicts=('yafst')
    
      16_dl="$url/releases/download/$_tag"
    
      17source_x86_64=("yafst-$_tag-linux-amd64.tar.gz::$_dl/yafst-$_tag-linux-amd64.tar.gz")
    
      18source_aarch64=("yafst-$_tag-linux-arm64.tar.gz::$_dl/yafst-$_tag-linux-arm64.tar.gz")
    
      19sha256sums_x86_64=('b64c56b740d32a70ec655e94a9582a5550412b0d093e864a5dbc7272a153f3ef')
    
      20sha256sums_aarch64=('8119e9b7a01190cc904cfbe8f39a19ad452367c689797ba3104fc32ace1ed1df')
    
      21
    
      22package() {
    
      23    install -Dm755 yafst "$pkgdir/usr/bin/yafst"
    
      24    install -Dm644 dev.wolfhound.yafst.desktop "$pkgdir/usr/share/applications/dev.wolfhound.yafst.desktop"
    
      25    install -Dm644 dev.wolfhound.yafst.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/dev.wolfhound.yafst.svg"
    
      26    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      27}
    
      28

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-11 19:23:32	Low	2