ardali
The package downloads a prebuilt binary from the project's own GitHub releases, which is a common but unverifiable practice; however, it installs only data and binaries from a plausible project source with no obfuscation or remote code execution.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's own GitHub releases, which is a common but unverifiable practice; however, it installs only data and binaries from a plausible project source with no obfuscation or remote code execution.
PKGBUILD
# Maintainer: Muhammed Dali <support@ardali.app>
pkgname=ardali
pkgver=6.0.1
pkgrel=1
pkgdesc="ArDali Browser native binary package"
arch=('x86_64')
url="https://github.com/Muhammed-Dali/ArDali-Browser"
license=('GPL-3.0-only')
depends=(
'ffmpeg'
'openssl'
'qt6-base'
'qt6-imageformats'
'qt6-svg'
'qt6-webengine'
)
provides=('ardali-browser' 'ardali-bin' 'ardali-webmedia')
conflicts=('ardali-browser' 'ardali-bin' 'ardali-webmedia' 'aurivo-bin')
replaces=('ardali-bin' 'ardali-webmedia')
source=("ardali-browser-${pkgver}-linux-x86_64.tar.zst::https://github.com/Muhammed-Dali/ArDali-Browser/releases/download/v${pkgver}/ardali-browser-${pkgver}-linux-x86_64.tar.zst")
sha256sums=('ba0a28a84ffe94369c4c769b758dd43888ca6e216f4d29f472f2d009cde9813d')
package() {
install -dm755 "${pkgdir}/usr"
cp -R "${srcdir}/usr/." "${pkgdir}/usr/"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-24 03:21:59 | Low | 2 |