Arch Linux User Repository

Here is a patch

diff --git a/.SRCINFO b/.SRCINFO
index 5c4b947..3f4d960 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,16 +1,15 @@
-# Generated by mksrcinfo v8
-# Sat Feb  9 00:23:00 UTC 2019
 pkgbase = shellcheck-static
    pkgdesc = shellcheck, without the 130MB haskell dependencies
    pkgver = 0.6.0
    pkgrel = 1
+   url = https://shellcheck.net
    arch = x86_64
    license = AGPL3
    depends = gmp
    provides = shellcheck=0.6.0
    conflicts = shellcheck
-   source = https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz
-   sha256sums = b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c
+   source = https://storage.googleapis.com/shellcheck/shellcheck-v0.6.0.linux.x86_64.tar.xz
+   sha512sums = d88733e95aea8e970c373a3f677a3eb272f14c12d3e9c93f81463b5fe406b43acdd3046d10c092f40c070a96a5fac1cf7e18b35ed790d76ecced6af32e2c8a85

 pkgname = shellcheck-static

diff --git a/PKGBUILD b/PKGBUILD
index 9bf7767..15c5d4f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,6 +3,7 @@ pkgver=0.6.0
 pkgrel=1
 pkgdesc="shellcheck, without the 130MB haskell dependencies"
 license=("AGPL3")
+url="https://shellcheck.net"
 arch=("x86_64")
 depends=('gmp')
 conflicts=("shellcheck")
@@ -10,8 +11,9 @@ provides=("shellcheck=0.6.0")

 # The statically-linked binary provided by the developer. See:
 # https://github.com/koalaman/shellcheck#installing
-source=("https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz")
-sha256sums=('b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c')
+source=("https://storage.googleapis.com/shellcheck/shellcheck-v${pkgver}.linux.${CARCH}.tar.xz")
+# From https://storage.googleapis.com/shellcheck/shellcheck-v${pkgver}.linux.${CARCH}.tar.xz.sha512sum
+sha512sums=('d88733e95aea8e970c373a3f677a3eb272f14c12d3e9c93f81463b5fe406b43acdd3046d10c092f40c070a96a5fac1cf7e18b35ed790d76ecced6af32e2c8a85')

 package() {
     cd "${srcdir}/shellcheck-stable"

• The source provides sha512sums which you can use in the PKGBUILD. It's better to use integrity sums from upstream if they're available.

• It's probably better to use the specific version file (shellcheck-v0.6.0.linux.x86_64.tar.xz.) rather than the "latest" version, as that will make the PKGBUILD not break when the software is updated. It will also solve the problem with overwriting a file with the same name when a new version is built.

v6.0 pkgbuild:

pkgname=shellcheck-static
pkgver=0.6.0
pkgrel=1
pkgdesc="shellcheck, without the 130MB haskell dependencies"
license=("AGPL3")
arch=("x86_64")
depends=('gmp')
conflicts=("shellcheck")
provides=("shellcheck=0.6.0")

# The statically-linked binary provided by the developer. See:
# https://github.com/koalaman/shellcheck#installing
source=("https://storage.googleapis.com/shellcheck/shellcheck-stable.linux.x86_64.tar.xz")
sha256sums=('b76c13cd98c41e2239b2d23bda967faba5142650383235ec3614146f52cf920c')

package() {
    cd "${srcdir}/shellcheck-stable"
    install -Dt "${pkgdir}/usr/bin" "shellcheck"
    install -Dt "${pkgdir}/usr/share/shellcheck" "LICENSE.txt" "README.txt"
}

The source binary is not compatible with i686. Please remove i686 from arch=.

timofonic: You asked for -git/nightly builds. The developer started offering them, soooo - have a PKGBUILD:

https://aur.archlinux.org/packages/shellcheck-git-static

doskoi: The ranty message has been updated to correctly express how irritating Haskell packaging on Arch is at the moment. Thank you.

The haskell dependencies weight "only" 130 MB now ;)

Should be renamed to -bin. -static implies there's some special configuration going on, but the package is still built from source, where this one clearly isn't.

That storage is maintained by the developer. He saw the whole pandoc-static thing going down on the forums and set that up. It's linked to from the github page:
https://github.com/koalaman/shellcheck#installing

If you can point me to a more up-to-date source of a static build (ie. one without hundreds of MB of haskell dependencies) I'll immediately update this package to use it.

Would it be possible to offer -git/nightly builds of the package?

I found the following, but latest date comes from 16 October 2017. Who maintains that storage?

https://shellcheck.storage.googleapis.com/shellcheck-latest.linux.x86_64.tar.xz

I'm going to clone your package and modify it to use the latest version. I can assign you as maintaner or co-maintainer if you want to ;)

Done.