zoo (LOW) - AURWatch

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the project's own GitHub repository, which is a normal AUR practice; the skipped checksum is a quality issue but does not imply malicious intent or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Mike Pento <mjpento@gmail.com>
    
      2# Contributor: Pavol Hluchy (Lopo) <lopo at losys dot eu>
    
      3# Based on http://ftp.linux.org.tr/slackware/slackware_source/a/zoo/zoo.SlackBuild
    
      4
    
      5pkgname=zoo
    
      6pkgver=2.10.r133.g2b2f9b6
    
      7pkgrel=3
    
      8pkgdesc="archiving and compressing utility"
    
      9url='https://github.com/troglobit/zoo'
    
      10license=('Unlicense')
    
      11arch=('i686' 'x86_64')
    
      12depends=('glibc')
    
      13source=(git+https://github.com/troglobit/${pkgname}.git)
    
      14sha512sums=('SKIP')
    
      15options=(!debug zipman)
    
      16
    
      17pkgver() {
    
      18    cd "$srcdir/${pkgname}"
    
      19    git describe --long --tags | sed 's/^v//;s/-/.r/;s/-/./g'
    
      20}
    
      21
    
      22build() {
    
      23	cd "$srcdir/${pkgname}"
    
      24    ./autogen.sh
    
      25    ./configure --enable-fiz --enable-ooz CFLAGS=-std=gnu89
    
      26    make
    
      27}
    
      28
    
      29package() {
    
      30	cd "$srcdir/${pkgname}"
    
      31    install -Dm755 "src/zoo" "${pkgdir}/usr/bin/zoo"
    
      32    install -Dm755 "src/fiz" "${pkgdir}/usr/bin/fiz"
    
      33    install -Dm755 "src/ooz" "${pkgdir}/usr/bin/ooz"
    
      34    install -Dm755 "src/unzoo" "${pkgdir}/usr/bin/unzoo"
    
      35    # man pages
    
      36    install -Dm644 "man/fiz.1" "${pkgdir}/usr/share/man/man1/fiz.1"
    
      37    install -Dm644 "man/unzoo.1" "${pkgdir}/usr/share/man/man1/unzoo.1"
    
      38    install -Dm644 "man/zoo.1" "${pkgdir}/usr/share/man/man1/zoo.1"
    
      39}
    
      40

Changes since previous scan

--- PKGBUILD @ 2026-10-16 00:12
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,41 +1,40 @@
-# Maintainer: Pavol Hluchy (Lopo) <lopo at losys dot eu>
+# Maintainer: Mike Pento <mjpento@gmail.com>
+# Contributor: Pavol Hluchy (Lopo) <lopo at losys dot eu>
 # Based on http://ftp.linux.org.tr/slackware/slackware_source/a/zoo/zoo.SlackBuild
 
 pkgname=zoo
-pkgver=2.10
-pkgrel=2
+pkgver=2.10.r133.g2b2f9b6
+pkgrel=3
 pkgdesc="archiving and compressing utility"
-url='http://rahul.rahul.net'
-license=('custom')
+url='https://github.com/troglobit/zoo'
+license=('Unlicense')
 arch=('i686' 'x86_64')
-source=('http://ftp.linux.org.tr/slackware/slackware/source/a/zoo/zoo-2.10.tar.gz'
-	'http://ftp.linux.org.tr/slackware/slackware/source/a/zoo/zoo_2.10-22.debian.tar.gz')
-sha512sums=('ea50ce2f5d6dc3f7182152fa62d62e2bf38f87da1291cc5d807d91e6b6f13540c21edfe960d6ea941b9ee6632187151e2dd49b33107f9bd3be3b6a02ef778e53'
-            '6fe7de492534a8b66bd1e1e02dc4cc3094a79cd5af7f631334695b268a9fb318667677e4c64f47fa527e6317afc3b3f12e70eff4a85e3562f1e0ef65769439b5')
-options=(zipman)
+depends=('glibc')
+source=(git+https://github.com/troglobit/${pkgname}.git)
+sha512sums=('SKIP')
+options=(!debug zipman)
 
-prepare() {
-	cd "$srcdir/${pkgname}-${pkgver}"
-
-	make clean || return 1
-	for diff in $srcdir/debian/patches/*patch; do
-		cat $diff | patch -p1 --verbose --backup --suffix=.orig || return 1
-	done
-	}
+pkgver() {
+    cd "$srcdir/${pkgname}"
+    git describe --long --tags | sed 's/^v//;s/-/.r/;s/-/./g'
+}
 
 build() {
-	cd "$srcdir/${pkgname}-${pkgver}"
-
-	make linux || return 1
-	}
+	cd "$srcdir/${pkgname}"
+    ./autogen.sh
+    ./configure --enable-fiz --enable-ooz CFLAGS=-std=gnu89
+    make
+}
 
 package() {
-	cd "$srcdir/${pkgname}-${pkgver}"
+	cd "$srcdir/${pkgname}"
+    install -Dm755 "src/zoo" "${pkgdir}/usr/bin/zoo"
+    install -Dm755 "src/fiz" "${pkgdir}/usr/bin/fiz"
+    install -Dm755 "src/ooz" "${pkgdir}/usr/bin/ooz"
+    install -Dm755 "src/unzoo" "${pkgdir}/usr/bin/unzoo"
+    # man pages
+    install -Dm644 "man/fiz.1" "${pkgdir}/usr/share/man/man1/fiz.1"
+    install -Dm644 "man/unzoo.1" "${pkgdir}/usr/share/man/man1/unzoo.1"
+    install -Dm644 "man/zoo.1" "${pkgdir}/usr/share/man/man1/zoo.1"
+}
 
-	for file in zoo fiz; do
-		install -Dm755 ${file} "${pkgdir}/usr/bin/${file}"
-		install -Dm644 ${file}.1 "${pkgdir}/usr/share/man/man1/${file}.1"
-	done
-	install -Dm644 Copyright "${pkgdir}/usr/share/licenses/${pkgname}/Copyright"
-	}
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Low	2
2026-10-31 00:07:41	Low	2
2026-10-30 00:29:30	Low	2
2026-10-29 00:13:55	Low	2
2026-10-28 00:06:54	Low	2
2026-10-27 00:23:28	Low	2
2026-10-26 00:12:40	Low	2
2026-10-25 00:20:48	Low	2
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 23:16:14	Medium	1
2026-10-16 00:12:47	Low	3
2026-10-15 00:28:05	Low	3
2026-10-14 00:06:47	Low	3