ziso_compressor_rust-bin
LOW
maintainer CosmicHeron
0 votes
scanned 2026-09-26 17:15:25.581789
Why flagged
The package downloads a prebuilt binary from a project-owned GitHub release, which is a normal AUR practice; the low severity is due to the binary being unverifiable but from a legitimate project source.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a project-owned GitHub release, which is a normal AUR practice; the low severity is due to the binary being unverifiable but from a legitimate project source.
PKGBUILD
1
# Maintainer: CosmicHeron <dev cosmicheron com>
2
3
_bin='ziso'
4
_pkgbase="${_bin}_compressor_rust"
5
pkgname="${_pkgbase}-bin"
6
pkgdesc='A rust written ziso compressor with multipple threads support'
7
url='https://github.com/Danixu/ziso_compressor_rust'
8
license=('Apache-2.0')
9
pkgver='1.0.1'
10
pkgrel='1'
11
arch=('x86_64')
12
provides=("$_bin")
13
conflict=("$_bin")
14
_src="${pkgname}-${pkgver}"
15
_license="LICENSE-${pkgver}"
16
source=(
17
"${_src}.zip::${url}/releases/download/v${pkgver}/ziso-linux-x64-musl.zip"
18
"${_license}::https://raw.githubusercontent.com/Danixu/ziso_compressor_rust/refs/tags/v${pkgver}/LICENSE"
19
)
20
b2sums=(
21
'945ba0b667b26852f02c5955952a5346d67b2ae74cc646f57e8e86f2665679b84b9dc775fd4b3b73029574af2667924e66d83bf226d7a12c2bcd9bca50d08cc6'
22
'7e49a6bd1b1d8756ff8516fa4c7ec9503cfc2955ae12f53ded3332e82e5b2cef1bae036578a020f493ab642029424938cc6a5435cb2ee07c5d3c717e396e40ef'
23
)
24
25
package() {
26
cd "${srcdir}" || exit
27
install -Dm755 "${_bin}" "${pkgdir}/usr/bin/${_bin}"
28
install -Dm644 "${_license}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
29
}
30
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-26 17:15:25 | Low | 2 |