zerus-ade-nightly-bin

LOW

maintainer ufna 0 votes scanned 2026-10-09 00:10:12.535420

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and trusted source for AUR packages; the low severity is due to the recent upload and few votes, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and trusted source for AUR packages; the low severity is due to the recent upload and few votes, not malicious content.

PKGBUILD

      1# Maintainer: Vladimir Alyamkin <ufna@ufna.dev>
    
      2pkgname=zerus-ade-nightly-bin
    
      3pkgver=0.37.0.r78.gfef1a00.n2
    
      4pkgrel=1
    
      5pkgdesc='Nightly agent development environment for persistent local and remote tmux sessions'
    
      6arch=('x86_64')
    
      7url='https://github.com/ufna/zerus'
    
      8license=('MIT')
    
      9# Floors describe the tested binary, not the publication runner's libraries.
    
      10depends=('qt6-base>=6.12.0' 'qt6-webengine>=6.11.2' 'qt6-svg>=6.12.0' 'kstatusnotifieritem>=6.30.0' 'kwindowsystem>=6.30.0' 'libgcc>=16.2.1+r23+gd564253eb6c8' 'libstdc++>=16.2.1+r23+gd564253eb6c8' 'glibc>=2.44+r50+g1848099f063e'
    
      11         'tmux>=3.7' 'openssh' 'python' 'curl' 'procps-ng' 'hicolor-icon-theme' 'bash' 'tar')
    
      12optdepends=('konsole: external KDE terminal integration'
    
      13            'wl-clipboard: clipboard transfers on Wayland'
    
      14            'xclip: clipboard transfers on X11'
    
      15            'nodejs: separately installed native agents and DeepSeek Harness'
    
      16            'npm: install Codex and DeepSeek Harness from Accounts'
    
      17            'git: Git repository and worktree features'
    
      18            'systemd: user service autostart and isolated DeepSeek scopes')
    
      19provides=("zerus=$pkgver" 'hgs' 'hgs-tray')
    
      20conflicts=('zerus' 'zerus-git' 'zerus-ade-bin')
    
      21options=('!strip' '!debug')
    
      22source=("https://github.com/ufna/zerus/releases/download/nightly-37851516418/zerus-${pkgver}-arch-${CARCH}.tar.gz")
    
      23sha256sums=('efd7dbc93f2a2e0f762b41374a198d33653b22320cd2ed63dc1c93e3ece1abd3')
    
      24
    
      25package() {
    
      26    cp -a "$srcdir/zerus-0.37.0-arch-$CARCH/usr" "$pkgdir/"
    
      27    mv "$pkgdir/usr/share/licenses/zerus-git" "$pkgdir/usr/share/licenses/$pkgname"
    
      28}
    
      29

Changes since previous scan

--- PKGBUILD @ 2026-10-09 00:05
+++ PKGBUILD @ 2026-10-09 00:10
@@ -1,6 +1,6 @@
 # Maintainer: Vladimir Alyamkin <ufna@ufna.dev>
 pkgname=zerus-ade-nightly-bin
-pkgver=0.37.0.r77.g9eb3a0e.n1
+pkgver=0.37.0.r78.gfef1a00.n2
 pkgrel=1
 pkgdesc='Nightly agent development environment for persistent local and remote tmux sessions'
 arch=('x86_64')
@@ -19,8 +19,8 @@
 provides=("zerus=$pkgver" 'hgs' 'hgs-tray')
 conflicts=('zerus' 'zerus-git' 'zerus-ade-bin')
 options=('!strip' '!debug')
-source=("https://github.com/ufna/zerus/releases/download/nightly-37848718703/zerus-${pkgver}-arch-${CARCH}.tar.gz")
-sha256sums=('9d0574f17b12325355bb3f7e44d4b4f030e56cb9df21fbf7d817717ac4b17c00')
+source=("https://github.com/ufna/zerus/releases/download/nightly-37851516418/zerus-${pkgver}-arch-${CARCH}.tar.gz")
+sha256sums=('efd7dbc93f2a2e0f762b41374a198d33653b22320cd2ed63dc1c93e3ece1abd3')
 
 package() {
     cp -a "$srcdir/zerus-0.37.0-arch-$CARCH/usr" "$pkgdir/"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-09 00:10:12	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 22:09:59	Low	2