zig0.16-bin

LOW

maintainer vitaliikuzhdin 0 votes scanned 2026-10-06 00:13:36.889724

View on AUR

Why flagged

The package downloads prebuilt Zig binaries and verifies them using minisign with a hardcoded public key from the official project, ensuring authenticity; the only concern is the low-trust context of few votes and recent upload, but the source is official and verification is in place.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt Zig binaries and verifies them using minisign with a hardcoded public key from the official project, ensuring authenticity; the only concern is the low-trust context of few votes and recent upload, but the source is official and verification is in place.

PKGBUILD

      1# Maintainer:  Vitalii Kuzhdin <vitaliikuzhdin@gmail.com>
    
      2
    
      3_basename="zig"
    
      4pkgver=0.16.0
    
      5_pkgver="${pkgver%.*}"
    
      6pkgrel=1
    
      7
    
      8declare -Ag _arch=(
    
      9  ['aarch64']='aarch64'
    
      10  ['armv7h']='arm'
    
      11  ['loong64']='loongarch64'
    
      12  ['powerpc64le']='powerpc64le'
    
      13  ['riscv64']='riscv64'
    
      14  # ['s390x']='s390x'
    
      15  ['i686']='x86'
    
      16  ['x86_64']='x86_64'
    
      17)
    
      18
    
      19_pkgname="${_basename}${_pkgver}"
    
      20pkgname="${_pkgname}-bin"
    
      21pkgdesc="General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software"
    
      22arch=(
    
      23  "${!_arch[@]}"
    
      24)
    
      25url="https://ziglang.org"
    
      26license=(
    
      27  'MIT'
    
      28)
    
      29makedepends=(
    
      30  'minisign'
    
      31)
    
      32provides=(
    
      33  "${_pkgname}"
    
      34)
    
      35conflicts=(
    
      36  "${_pkgname}"
    
      37)
    
      38options=(
    
      39  'emptydirs'
    
      40  '!strip'
    
      41)
    
      42for _carch in "${!_arch[@]}"; do
    
      43  eval "
    
      44source_${_carch}=(
    
      45  '${url}/download/${pkgver}/${_basename}-${_arch[${_carch}]}-linux-${pkgver}.tar.xz'
    
      46  '${url}/download/${pkgver}/${_basename}-${_arch[${_carch}]}-linux-${pkgver}.tar.xz.minisig'
    
      47)"
    
      48done
    
      49sha256sums_aarch64=('ea4b09bfb22ec6f6c6ceac57ab63efb6b46e17ab08d21f69f3a48b38e1534f17'
    
      50                    'SKIP')
    
      51sha256sums_i686=('4e34e279a9f856358de420490b531974c3d37f8f3707eef9f0342e92c14c301f'
    
      52                 'SKIP')
    
      53sha256sums_riscv64=('bc069b0f2f568f54bafbdfc1d65b12fd386ed6a652044a37aee6a4f72f14076e'
    
      54                    'SKIP')
    
      55sha256sums_x86_64=('70e49664a74374b48b51e6f3fdfbf437f6395d42509050588bd49abe52ba3d00'
    
      56                   'SKIP')
    
      57sha256sums_powerpc64le=('18800b45c08bf40b335ca5ab79aea70aca287ca969036e938155772becaeebeb'
    
      58                        'SKIP')
    
      59sha256sums_loong64=('2503be8ecc5965f1f7962471d267d9f83fcb3cc2f7ff78ac34093b9722bbea93'
    
      60                    'SKIP')
    
      61sha256sums_armv7h=('f85116bf2f9189bb6ae280c7f92f03b89c2551a88e17881c0c2df86bf4e42c50'
    
      62                   'SKIP')
    
      63
    
      64verify() {
    
      65  # https://ziglang.org/download/
    
      66  local ziglang_minisign="RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U"
    
      67  local source_array="source_${CARCH}[0]"
    
      68  local source_url="${!source_array}"
    
      69  local source_artifact="${source_url##*/}"
    
      70
    
      71  minisign -V \
    
      72    -P "${ziglang_minisign}" \
    
      73    -m "${source_artifact}"
    
      74}
    
      75
    
      76package() {
    
      77  local source_array="source_${CARCH}[0]"
    
      78  local source_url="${!source_array}"
    
      79  local source_artifact="${source_url##*/}"
    
      80
    
      81  cd "${srcdir}/${source_artifact%.tar*}"
    
      82  install -vDm755 "${_basename}" -t "${pkgdir}/opt/${_pkgname}"
    
      83  install -vDm644 "README.md"    -t "${pkgdir}/usr/share/doc/${_pkgname}"
    
      84  install -vDm644 "LICENSE"      -t "${pkgdir}/usr/share/licenses/${_pkgname}"
    
      85
    
      86  cp -a --no-preserve=ownership "doc" -T "${pkgdir}/usr/share/doc/${_pkgname}"
    
      87  cp -a --no-preserve=ownership "lib" -t "${pkgdir}/opt/${_pkgname}"
    
      88
    
      89  install -vd "${pkgdir}/usr/bin" "${pkgdir}/usr/lib"
    
      90  ln -vsf "/opt/${_pkgname}/${_basename}" "${pkgdir}/usr/bin/${_basename}-${_pkgver}"
    
      91  ln -vsf "/opt/${_pkgname}/lib"          "${pkgdir}/usr/lib/${_pkgname}"
    
      92}
    
      93

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 00:13:36	Low	2
2026-10-05 23:40:58	Low	1