AUR Report Card
Generated reports on the quality of PKGBUILDs in the Arch User Repository (AUR). Reports are generated by statically analyzing the PKGBUILD files using pkglint.
- scanned
- {{.Generated}}
- packages
- {{.Total}}
- findings
- {{.Findings}}
- auto-fixable
- {{.Fixable}}
- drifted
- {{.Drifted}}
Distributionn = {{.Total}}
{{range .Bands}}
{{end}}
{{/* A disclosure rather than a standing section: the caveat matters, but it
is read once and then in the way. keeps it one click deep
with no script. */}}
What a grade means
The grade measures hygiene: are sources pinned to something that can't change underneath you, does the build stay off the network, and can a reader follow what the package does without running it? That is all it measures.
It is not a malware verdict. An F means read this PKGBUILD before you build it. An A means nothing stood out to a parser — not that the package is safe. Static analysis cannot catch a malicious upstream release pinned with a perfectly valid checksum.
Rostern = {{.Total}}
| Grade | Package | Findings | Votes | Description |
|---|---|---|---|---|
| {{.Grade}} | {{.Name}}{{if .Drift}} ⚠{{end}} | {{len .Findings}} | {{.Votes}} | {{.Description}} |
No package matches that filter.