aether-shell-git

LOW

maintainer clague 0 votes scanned 2026-11-06 16:12:45.700570

View on AUR

Why flagged

The package builds from a git source hosted on GitHub under the maintainer's account, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a git source hosted on GitHub under the maintainer's account, which is normal for AUR packages; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Aether <https://github.com/clague/aether-shell/issues>
    
      2
    
      3pkgname=aether-shell-git
    
      4_pkgname=aether-shell
    
      5pkgver=2.5.0.r1135.g69be4dc
    
      6pkgrel=1
    
      7pkgdesc='Quickshell desktop shell for Hyprland, merging MiDnight Shell and OP-Caelestia'
    
      8arch=('x86_64')
    
      9url='https://github.com/clague/aether-shell'
    
      10license=('GPL-3.0-only')
    
      11depends=(
    
      12    # Shell runtime
    
      13    'quickshell-git'
    
      14    'glibc'
    
      15    'gcc-libs'
    
      16    'hyprland'
    
      17    'xkeyboard-config'
    
      18
    
      19    # In-tree command surface (bin/aether): scheme, wallpaper, screenshots, recording
    
      20    'python'
    
      21    'python-materialyoucolor'
    
      22    'python-pillow'
    
      23    'python-dbus'
    
      24    'python-gobject'
    
      25    'ffmpeg'
    
      26    'grim'
    
      27    'slurp'
    
      28    'swappy'
    
      29    'wl-clipboard'
    
      30    'gpu-screen-recorder'
    
      31    'dart-sass'
    
      32    'dconf'
    
      33
    
      34    # Services and hardware
    
      35    'networkmanager'
    
      36    'lm_sensors'
    
      37    'power-profiles-daemon'
    
      38    'ddcutil'
    
      39    'brightnessctl'
    
      40    'libcava'
    
      41    'libpipewire'
    
      42    'libqalculate'
    
      43    'aubio'
    
      44    'protobuf'
    
      45    'openssl'
    
      46
    
      47    # Qt modules
    
      48    'qt6-base'
    
      49    'qt6-declarative'
    
      50    'qt6-imageformats'
    
      51    'qt6-multimedia'
    
      52    'qt6-m3shapes-git'
    
      53
    
      54    # Small helpers the QML calls by name
    
      55    'bash'
    
      56    'fish'
    
      57    'lua'
    
      58    'cliphist'
    
      59    'fuzzel'
    
      60    'libnotify'
    
      61    'libsecret'
    
      62    'libxml2'
    
      63    'unzip'
    
      64    'procps-ng'
    
      65    'xdg-utils'
    
      66    'fontconfig'
    
      67
    
      68    # Fonts the defaults name
    
      69    'ttf-material-symbols-variable'
    
      70    'ttf-cascadia-code-nerd'
    
      71)
    
      72optdepends=(
    
      73    'hyprmoncfg: save and restore monitor layouts from the Display page'
    
      74    'bluez: Bluetooth devices and the pairing agent'
    
      75    'fprintd: fingerprint unlock on the lock screen'
    
      76    'howdy-next: face unlock on the lock screen'
    
      77    'asdbctl: brightness for Apple Studio Displays'
    
      78    'xdg-desktop-portal-hyprland: screen sharing and file pickers'
    
      79    'python-playwright: web search/read tools in the AI assistant (then run playwright install chromium)'
    
      80    'ttf-rubik-vf: alternative UI font for older configs'
    
      81)
    
      82makedepends=('git' 'cmake' 'ninja' 'qt6-shadertools')
    
      83provides=('aether-shell')
    
      84conflicts=('aether-shell')
    
      85install=aether-shell.install
    
      86source=("$pkgname::git+$url.git")
    
      87sha256sums=('SKIP')
    
      88
    
      89pkgver() {
    
      90    cd "$srcdir/$pkgname"
    
      91    # A fork does not always push its tags. Fall back to the commit count rather than failing
    
      92    # the build with "No names found, cannot describe anything".
    
      93    if git describe --long --tags --abbrev=7 >/dev/null 2>&1; then
    
      94        git describe --long --tags --abbrev=7 | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      95    else
    
      96        printf 'r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      97    fi
    
      98}
    
      99
    
      100build() {
    
      101    cd "$srcdir/$pkgname"
    
      102
    
      103    cmake -B build -G Ninja \
    
      104        -DCMAKE_BUILD_TYPE=RelWithDebInfo \
    
      105        -DCMAKE_INSTALL_PREFIX=/ \
    
      106        -DDISTRIBUTOR="AUR (package: $pkgname)"
    
      107    cmake --build build
    
      108}
    
      109
    
      110package() {
    
      111    cd "$srcdir/$pkgname"
    
      112
    
      113    DESTDIR="$pkgdir" cmake --install build
    
      114
    
      115    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
    
      116
    
      117    # The Hyprland side of the shell is not read at runtime. Ship it as a reference so the
    
      118    # post-install message can point at real keybinds and variables instead of a wiki.
    
      119    install -d "$pkgdir/usr/share/$_pkgname"
    
      120    cp -a hypr "$pkgdir/usr/share/$_pkgname/hypr"
    
      121}
    
      122

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-06 16:12:45	Low	2