alacritty-use-theme-with-redshift-git

LOW

maintainer christophermca 1 votes base alacritty-use-theme-with-services-git scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package installs systemd user services and scripts to manage Alacritty themes, with no privileged operations or self-updates; the flagged 'privileged install' is a false positive as it only refers to standard user-level systemd unit installation.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs systemd user services and scripts to manage Alacritty themes, with no privileged operations or self-updates; the flagged 'privileged install' is a false positive as it only refers to standard user-level systemd unit installation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:35 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
PKGBUILD:36 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
PKGBUILD:46 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/auto-update-gnome-theme.sh"

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: Christopher McAdams <mca.christopher@gmail.com>
    
      2pkgname=("alacritty-use-theme-with-redshift-git" "alacritty-use-theme-with-gnome-darkmode-git")
    
      3pkgbase=alacritty-use-theme-with-services-git
    
      4pkgver=r69.606dd50
    
      5pkgrel=1
    
      6pkgdesc="services to use alacritty-use-theme"
    
      7arch=('any')
    
      8url="https://github.com/alacritty-use-theme/alacritty-use-theme-with-services"
    
      9license=('GPL-1.0-or-later')
    
      10groups=('alacritty-use-theme' 'alacritty-use-theme-services')
    
      11depends=('redshift' 'alacritty-use-theme')
    
      12makedepends=('git')
    
      13source=("$pkgbase::git+https://github.com/alacritty-use-theme/alacritty-use-theme-with-services.git")
    
      14md5sums=('SKIP')
    
      15
    
      16pkgver() {
    
      17  cd "$pkgbase"
    
      18  printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      19}
    
      20
    
      21package_alacritty-use-theme-with-redshift-git() {
    
      22	# options and directives that can be overridden
    
      23  pkgdesc="::Rolling release:: Changes alacritty theme based on the current time and locale"
    
      24  depends=('redshift' 'alacritty-use-theme')
    
      25  provides=('alaritty-use-theme-with-redshift.service' 'alaritty-use-theme-with-redshift.timer' 'alaritty-use-theme-with-redshift.target' 'auto-update-gnome-theme.service' 'auto-update-gnome-theme.path')
    
      26  conflicts=('alacritty-use-theme-with-redshift' 'alacritty-use-theme-with-redshift-git')
    
      27  install=alacritty-use-theme-with-redshift-git.install
    
      28
    
      29	cd "$pkgbase"
    
      30
    
      31  # systemd units
    
      32  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.timer "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.timer"
    
      33  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.target "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.target"
    
      34  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.service "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.service"
    
      35  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
    
      36  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
    
      37
    
      38  #config$pkgbase
    
      39  install -Dm755 $srcdir/$pkgbase/app/home/config/theme-switcher/environment.env "$pkgdir/usr/lib/alacritty-use-theme/environment.env"
    
      40
    
      41  # scripts$pkgbase
    
      42  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/theme-switcher.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/theme-switcher.sh"
    
      43  install -Dm777 $srcdir/$pkgbase/app/home/local/share/theme-switcher/toggle-theme-per-mode.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/toggle-theme-per-mode.sh"
    
      44
    
      45  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/get-sunrise-sunset.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/get-sunrise-sunset.sh"
    
      46  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/auto-update-gnome-theme.sh"
    
      47  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/update-de.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/update-de.sh"
    
      48
    
      49  # DEBUG tools
    
      50  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/utils/debug.sh "$pkgdir/usr/lib/alacritty-use-theme/utils/debug.sh"
    
      51  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/utils/is_theme_locked.sh "$pkgdir/usr/lib/alacritty-use-theme/utils/is_theme_locked.sh"
    
      52
    
      53  #VARS
    
      54  install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/shared-variables.sh "$pkgdir/usr/share/alacritty-use-theme/theme-switcher/shared-variables.sh"
    
      55  install -Dm777 $srcdir/$pkgbase/app/home/config/theme-switcher/mode "$pkgdir/usr/lib/alacritty-use-theme/theme-switcher/mode"
    
      56}
    
      57
    
      58package_alacritty-use-theme-with-gnome-darkmode-git() {
    
      59	# options and directives overrides
    
      60  pkgdesc="::Rolling release:: Changes alacritty theme when clicking the 'Dark Style' button in Gnome's System tray"
    
      61  url="https://github.com/alacritty-use-theme/alacritty-use-theme-with-gnome-darkmode"
    
      62  depends=('bash' 'awk' 'alacritty-use-theme')
    
      63  provides=('alacritty-listen-to-colorscheme.service')
    
      64  conflicts=('alacritty-use-theme-with-gnome-darkmode')
    
      65  replaces=('alacritty-use-theme-with-gnome-darkmode-git' 'alacritty-toggle-theme-on-darkmode-git')
    
      66  install=alacritty-use-theme-with-gnome-darkmode-git.install
    
      67
    
      68	cd "$pkgbase"
    
      69
    
      70  # systemd units
    
      71  install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-listen-to-colorscheme.service "$pkgdir/usr/lib/systemd/user/alacritty-listen-to-colorscheme.service"
    
      72
    
      73  # toggle-mode-on-dbus-signal
    
      74  install -Dm755 $srcdir/$pkgbase/app/home/local/alacritty-use-theme/bin/toggle-mode-on-signal.sh "$pkgdir/usr/bin/alacritty-use-theme/toggle-mode-on-signal.sh"
    
      75
    
      76  # documentation
    
      77  install -Dm644 $srcdir/$pkgbase/docs/alacritty-use-theme-with-gnome-darkmode/alacritty-toggle-theme-on-darkmode.md "$pkgdir/usr/share/docs/$pkgname/README.md"
    
      78}
    
      79

Changes since previous scan

--- PKGBUILD @ 2026-09-11 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,10 +1,10 @@
 # Maintainer: Christopher McAdams <mca.christopher@gmail.com>
 pkgname=("alacritty-use-theme-with-redshift-git" "alacritty-use-theme-with-gnome-darkmode-git")
 pkgbase=alacritty-use-theme-with-services-git
-pkgver=r68.6dfd60d
-pkgrel=2
+pkgver=r69.606dd50
+pkgrel=1
 pkgdesc="services to use alacritty-use-theme"
-arch=('x86_64')
+arch=('any')
 url="https://github.com/alacritty-use-theme/alacritty-use-theme-with-services"
 license=('GPL-1.0-or-later')
 groups=('alacritty-use-theme' 'alacritty-use-theme-services')

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 19:23:32	Medium	1
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2