Independent PKGBUILD review

Know what your AUR package is doing.

Browse AI-assisted security checks, inspect risk assessments, and review the exact PKGBUILD changes behind them.

How it works

Security reviews that show their work.

01 · Detect

Surface risky changes

AI-assisted reviews screen AUR PKGBUILDs and repository changes for malware, suspicious behavior, and supply-chain risk.

02 · Explain

Show the work

Every verdict comes with a plain-language explanation and the exact commit, full PKGBUILD, and diff behind it.

03 · Verify

Make the final call

Search checks, inspect the evidence, and decide for yourself whether a package change is safe to build and install.

Experimental paru integration

Review AUR changes before the build starts.

The paru integration checks commits since your accepted baseline against the hosted service, then locally assesses any uncovered range. Safe packages can skip manual review; anything else stays in paru's normal review flow.

Read the setup on GitHub ↗

A review aid, not a trust badge.

AI assessments can miss malicious behavior or flag legitimate packaging patterns. Use the stored source and commit history to verify a package before installing it.