aerial-lock-git

LOW

maintainer a_i 0 votes scanned 2026-11-03 04:04:05.596932

View on AUR

Why flagged

Package builds from its own Git repository with a SKIP'd checksum, but sources are from a trusted project host (GitHub) under the maintainer's account, and no unverified executables or malicious patterns are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from its own Git repository with a SKIP'd checksum, but sources are from a trusted project host (GitHub) under the maintainer's account, and no unverified executables or malicious patterns are present.

PKGBUILD

      1# Maintainer: Alex Indigo <iam@alexindigo.com>
    
      2
    
      3pkgname=aerial-lock-git
    
      4_project=aerial-lock
    
      5pkgver=0.1.0.r0.g2f00ea1
    
      6pkgrel=1
    
      7pkgdesc='Wayland session lock with video backgrounds and an idle/session companion'
    
      8arch=('x86_64')
    
      9url='https://github.com/alexindigo/aerial-lock'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('quickshell>=0.3' 'quickshell<0.4' 'qt6-mpvqml>=0.2.0'
    
      12         'qt6-5compat' 'qt6-base' 'qt6-declarative' 'pam' 'wayland'
    
      13         'bash' 'glibc' 'libgcc' 'libstdc++')
    
      14makedepends=('git' 'wayland-protocols')
    
      15optdepends=('curl: remote video pack downloader'
    
      16            'python: remote video pack downloader'
    
      17            'tar: remote video pack downloader'
    
      18            'procps-ng: signal-unlock examples'
    
      19            'qt6-niriqml: focused-output selection on niri'
    
      20            'systemd: aerial-idle user service and logind integration'
    
      21            'elogind: logind integration without systemd (unverified)')
    
      22provides=('aerial-lock')
    
      23conflicts=('aerial-lock')
    
      24backup=('etc/pam.d/aerial-lock')
    
      25install=aerial-lock-git.install
    
      26source=("${_project}::git+https://github.com/alexindigo/aerial-lock.git")
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30    cd "${srcdir}/${_project}"
    
      31    local description
    
      32    description=$(git describe --long --tags) || return
    
      33    printf '%s\n' "$description" | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      34}
    
      35
    
      36build() {
    
      37    cd "${srcdir}/${_project}"
    
      38    make PREFIX=/usr DEBUG_DISMISS=0 DEBUG_VERBOSE=0
    
      39}
    
      40
    
      41package() {
    
      42    cd "${srcdir}/${_project}"
    
      43    make install DESTDIR="$pkgdir" PREFIX=/usr DEBUG_DISMISS=0 DEBUG_VERBOSE=0
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 04:04:05	Low	2