alacritty-use-theme-with-redshift-git

maintainer christophermca · 1 votes · base alacritty-use-theme-with-services-git · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The flagged patterns involve installing systemd user services and scripts, which is normal for this type of package; no privileged operations or self-updates are actually performed, and all installed files are from the project's own Git repository.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The flagged patterns involve installing systemd user services and scripts, which is normal for this type of package; no privileged operations or self-updates are actually performed, and all installed files are from the project's own Git repository.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

  • PKGBUILD:35 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
  • PKGBUILD:36 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
  • PKGBUILD:46 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/auto-update-gnome-theme.sh"

PKGBUILD

3 offending line(s) highlighted
1# Maintainer: Christopher McAdams <mca.christopher@gmail.com>
2pkgname=("alacritty-use-theme-with-redshift-git" "alacritty-use-theme-with-gnome-darkmode-git")
3pkgbase=alacritty-use-theme-with-services-git
4pkgver=r68.6dfd60d
5pkgrel=2
6pkgdesc="services to use alacritty-use-theme"
7arch=('x86_64')
8url="https://github.com/alacritty-use-theme/alacritty-use-theme-with-services"
9license=('GPL-1.0-or-later')
10groups=('alacritty-use-theme' 'alacritty-use-theme-services')
11depends=('redshift' 'alacritty-use-theme')
12makedepends=('git')
13source=("$pkgbase::git+https://github.com/alacritty-use-theme/alacritty-use-theme-with-services.git")
14md5sums=('SKIP')
15
16pkgver() {
17 cd "$pkgbase"
18 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
19}
20
21package_alacritty-use-theme-with-redshift-git() {
22 # options and directives that can be overridden
23 pkgdesc="::Rolling release:: Changes alacritty theme based on the current time and locale"
24 depends=('redshift' 'alacritty-use-theme')
25 provides=('alaritty-use-theme-with-redshift.service' 'alaritty-use-theme-with-redshift.timer' 'alaritty-use-theme-with-redshift.target' 'auto-update-gnome-theme.service' 'auto-update-gnome-theme.path')
26 conflicts=('alacritty-use-theme-with-redshift' 'alacritty-use-theme-with-redshift-git')
27 install=alacritty-use-theme-with-redshift-git.install
28
29 cd "$pkgbase"
30
31 # systemd units
32 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.timer "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.timer"
33 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.target "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.target"
34 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-use-theme.service "$pkgdir/usr/lib/systemd/user/alacritty-use-theme.service"
35 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
36 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
37
38 #config$pkgbase
39 install -Dm755 $srcdir/$pkgbase/app/home/config/theme-switcher/environment.env "$pkgdir/usr/lib/alacritty-use-theme/environment.env"
40
41 # scripts$pkgbase
42 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/theme-switcher.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/theme-switcher.sh"
43 install -Dm777 $srcdir/$pkgbase/app/home/local/share/theme-switcher/toggle-theme-per-mode.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/toggle-theme-per-mode.sh"
44
45 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/get-sunrise-sunset.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/get-sunrise-sunset.sh"
46 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/auto-update-gnome-theme.sh"
47 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/bin/update-de.sh "$pkgdir/usr/lib/alacritty-use-theme/bin/theme-switcher/update-de.sh"
48
49 # DEBUG tools
50 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/utils/debug.sh "$pkgdir/usr/lib/alacritty-use-theme/utils/debug.sh"
51 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/utils/is_theme_locked.sh "$pkgdir/usr/lib/alacritty-use-theme/utils/is_theme_locked.sh"
52
53 #VARS
54 install -Dm755 $srcdir/$pkgbase/app/home/local/theme-switcher/src/shared-variables.sh "$pkgdir/usr/share/alacritty-use-theme/theme-switcher/shared-variables.sh"
55 install -Dm777 $srcdir/$pkgbase/app/home/config/theme-switcher/mode "$pkgdir/usr/lib/alacritty-use-theme/theme-switcher/mode"
56}
57
58package_alacritty-use-theme-with-gnome-darkmode-git() {
59 # options and directives overrides
60 pkgdesc="::Rolling release:: Changes alacritty theme when clicking the 'Dark Style' button in Gnome's System tray"
61 url="https://github.com/alacritty-use-theme/alacritty-use-theme-with-gnome-darkmode"
62 depends=('bash' 'awk' 'alacritty-use-theme')
63 provides=('alacritty-listen-to-colorscheme.service')
64 conflicts=('alacritty-use-theme-with-gnome-darkmode')
65 replaces=('alacritty-use-theme-with-gnome-darkmode-git' 'alacritty-toggle-theme-on-darkmode-git')
66 install=alacritty-use-theme-with-gnome-darkmode-git.install
67
68 cd "$pkgbase"
69
70 # systemd units
71 install -Dm755 $srcdir/$pkgbase/app/home/config/systemd/user/alacritty-listen-to-colorscheme.service "$pkgdir/usr/lib/systemd/user/alacritty-listen-to-colorscheme.service"
72
73 # toggle-mode-on-dbus-signal
74 install -Dm755 $srcdir/$pkgbase/app/home/local/alacritty-use-theme/bin/toggle-mode-on-signal.sh "$pkgdir/usr/bin/alacritty-use-theme/toggle-mode-on-signal.sh"
75
76 # documentation
77 install -Dm644 $srcdir/$pkgbase/docs/alacritty-use-theme-with-gnome-darkmode/alacritty-toggle-theme-on-darkmode.md "$pkgdir/usr/share/docs/$pkgname/README.md"
78}
79

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion