ariang-native-electron-git

maintainer ZhangHua · 1 votes · base ariang-native-git · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The flagged pattern involves a variable-named dependency (${_electron}) which resolves to 'electron22', a known AUR package; this is a common and safe practice for selecting alternative dependencies without introducing untrusted code.

Triggered rules

LOW AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-07-25) reviewed it and judged it LOW (confidence 95%): The flagged pattern involves a variable-named dependency (${_electron}) which resolves to 'electron22', a known AUR package; this is a common and safe practice for selecting alternative dependencies without introducing untrusted code.

  • PKGBUILD:31 npm install --save=false ${main_depends[@]}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: ZhangHua <zhanghuadedn at gmail dot com>
2
3pkgname=("ariang-native-git" "ariang-native-electron-git")
4pkgver=1.3.14.r1.g7c4e4b5
5pkgrel=1
6pkgdesc="A better aria2 desktop frontend than AriaNg."
7license=("MIT")
8depends=("shared-mime-info" "hicolor-icon-theme")
9makedepends=("npm" "git" "imagemagick" "jq")
10arch=("x86_64" "aarch64" "i686")
11url="https://github.com/mayswind/AriaNg-Native"
12provides=("ariang-native")
13conflicts=("ariang-native")
14source=(
15 "git+${url}.git#branch=master"
16 "ariang-native"
17 "ariang-native.desktop")
18sha256sums=('SKIP'
19 '2b6381f00d83250adc398c4db273ac47104c459c55b3191be908b108d8ae277d'
20 '56575bb86f952a0fb3f266d5e5824eb37b14e3015f99fae53950eef2f183d9ad')
21_electron=electron22
22
23pkgver(){
24 cd "${srcdir}/AriaNg-Native"
25 git describe --long --tags | sed 's/^v//;s/-/.r/;s/-/./g'
26}
27build(){
28 cd "${srcdir}/AriaNg-Native"
29 npm install
30 main_depends=$(jq -r .mainDependencies[] package.json) && \
31 npm install --save=false ${main_depends[@]}
32 npm run generate-build-json
33 npm run copy-main-dependencies
34 npm run copy-app-dependencies
35 PATH=node_modules/.bin:$PATH electron-builder --linux --dir
36 cd assets
37 magick AriaNg.ico[0] ariang-native.png
38 magick AriaNg_Metalink.ico[0] ariang-native-metalink.png
39 magick AriaNg_Torrent.ico[0] ariang-native-torrent.png
40}
41package_ariang-native-git(){
42 depends+=(
43 # Depends from aur/electron22
44 "c-ares" "gcc-libs" "glibc" "gtk3" "libgtk-3.so" "libevent" "nss" "wayland"
45 "zlib" "fontconfig" "woff2" "aom" "brotli" "libjpeg-turbo" "icu" "dav1d" "flac"
46 "snappy" "libdrm" "libxml2" "ffmpeg" "libwebp" "minizip" "opus" "harfbuzz"
47 "jsoncpp" "libxslt" "libpng" "freetype2"
48 )
49 optdepends+=(
50 "kde-cli-tools"
51 "libappindicator-gtk3"
52 "pipewire"
53 "qt5-base"
54 "trash-cli"
55 "xdg-utils"
56 )
57
58 case ${CARCH} in
59 "x86_64")
60 _arch="-";;
61 "aarch64")
62 _arch="-arm64-";;
63 "i686")
64 _arch="-ia32-";;
65 "*")
66 _arch="-${CARCH}-";;
67 esac
68 cd "${srcdir}/AriaNg-Native"
69 local id
70 id="$(jq -r .appId package.json)"
71 mkdir -p "${pkgdir}/opt/ariang-native" "${pkgdir}/usr/bin"
72 cp -a "dist/linux${_arch}unpacked/." \
73 "${pkgdir}/opt/ariang-native"
74 ln -s /opt/ariang-native/ariang-native \
75 "${pkgdir}/usr/bin/ariang-native"
76 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
77 "${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
78
79 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
80 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
81 ln -s application-metalink+xml.png \
82 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
83 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
84 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
85 install -Dm644 "${srcdir}/ariang-native.desktop" \
86 "${pkgdir}/usr/share/applications/${id}.desktop"
87 install -Dm644 LICENSE \
88 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
89}
90package_ariang-native-electron-git(){
91 conflicts+=("ariang-native-electron")
92 provides+=("ariang-native-electron")
93 depends+=("${_electron}" "bash")
94 pkgdesc+=' with system electron'
95 case ${CARCH} in
96 "x86_64")
97 _arch="-";;
98 "aarch64")
99 _arch="-arm64-";;
100 "i686")
101 _arch="-ia32-";;
102 "*")
103 _arch="-${CARCH}-";;
104 esac
105 cd "${srcdir}/AriaNg-Native"
106 local id
107 id="$(jq -r .appId package.json)"
108 install -Dm644 \
109 "${srcdir}/AriaNg-Native/dist/linux${_arch}unpacked/resources/app.asar" \
110 "${pkgdir}/usr/lib/ariang-native/ariang-native.asar"
111 install -Dm755 "${srcdir}/ariang-native" \
112 "${pkgdir}/usr/bin/ariang-native"
113 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
114 "${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
115
116 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
117 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
118 ln -s application-metalink+xml.png \
119 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
120 install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
121 "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
122 install -Dm644 "${srcdir}/ariang-native.desktop" \
123 "${pkgdir}/usr/share/applications/${id}.desktop"
124 sed -i "s/^electron[0-9]*/${_electron}/" "${pkgdir}/usr/bin/ariang-native"
125 install -Dm644 LICENSE \
126 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
127}
128

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 1
2026-08-02 00:16:08 LOW 1
2026-08-01 00:11:18 LOW 1
2026-07-31 00:14:10 LOW 1
2026-07-30 00:17:23 LOW 1
2026-07-29 00:25:53 LOW 1
2026-07-28 00:07:28 LOW 1
2026-07-27 00:24:32 LOW 1
2026-07-26 00:07:32 LOW 1
2026-07-25 00:13:44 LOW 1
2026-07-24 00:02:28 LOW 1
2026-07-23 00:14:47 LOW 1
2026-07-22 00:29:32 LOW 1
2026-07-21 00:24:15 LOW 1
2026-07-20 00:19:49 LOW 1
2026-07-19 00:17:08 LOW 1
2026-07-18 00:14:48 LOW 1
2026-07-17 00:06:16 LOW 1
2026-07-16 00:05:41 LOW 1
2026-07-15 00:09:25 LOW 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion