ariang-native-electron-git
LOW
maintainer ZhangHua
1 votes
base
ariang-native-git
scanned 2026-09-17 00:27:14.276658
Why flagged
The variable-named package installation refers to a local variable '_electron' set to 'electron22', a known AUR package, and is used in a standard dependency declaration, posing no supply-chain risk.
Triggered rules
Low
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The variable-named package installation refers to a local variable '_electron' set to 'electron22', a known AUR package, and is used in a standard dependency declaration, posing no supply-chain risk.
-
PKGBUILD:32
npm install --save=false ${main_depends[@]}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: ZhangHua <zhanghuadedn at gmail dot com>
2
3
pkgname=("ariang-native-git" "ariang-native-electron-git")
4
pkgver=1.3.14.r3.g64faec7
5
pkgrel=1
6
pkgdesc="A better aria2 desktop frontend than AriaNg."
7
license=("MIT")
8
depends=("shared-mime-info" "hicolor-icon-theme")
9
makedepends=("npm" "git" "imagemagick" "jq")
10
arch=("x86_64" "aarch64" "i686")
11
url="https://github.com/mayswind/AriaNg-Native"
12
provides=("ariang-native")
13
conflicts=("ariang-native")
14
source=(
15
"git+${url}.git#branch=master"
16
"ariang-native"
17
"ariang-native.desktop")
18
sha256sums=('SKIP'
19
'2b6381f00d83250adc398c4db273ac47104c459c55b3191be908b108d8ae277d'
20
'56575bb86f952a0fb3f266d5e5824eb37b14e3015f99fae53950eef2f183d9ad')
21
_electron=electron22
22
23
pkgver(){
24
cd "${srcdir}/AriaNg-Native"
25
git describe --long --tags | sed 's/^v//;s/-/.r/;s/-/./g'
26
}
27
build(){
28
cd "${srcdir}/AriaNg-Native"
29
export npm_config_allow_git=all
30
npm install
31
main_depends=$(jq -r .mainDependencies[] package.json) && \
32
npm install --save=false ${main_depends[@]}
33
npm run generate-build-json
34
npm run copy-main-dependencies
35
npm run copy-app-dependencies
36
PATH=node_modules/.bin:$PATH electron-builder --linux --dir
37
cd assets
38
magick AriaNg.ico[0] ariang-native.png
39
magick AriaNg_Metalink.ico[0] ariang-native-metalink.png
40
magick AriaNg_Torrent.ico[0] ariang-native-torrent.png
41
}
42
package_ariang-native-git(){
43
depends+=(
44
# Depends from aur/electron22
45
"c-ares" "gcc-libs" "glibc" "gtk3" "libgtk-3.so" "libevent" "nss" "wayland"
46
"zlib" "fontconfig" "woff2" "aom" "brotli" "libjpeg-turbo" "icu" "dav1d" "flac"
47
"snappy" "libdrm" "libxml2" "ffmpeg" "libwebp" "minizip" "opus" "harfbuzz"
48
"jsoncpp" "libxslt" "libpng" "freetype2"
49
)
50
optdepends+=(
51
"kde-cli-tools"
52
"libappindicator-gtk3"
53
"pipewire"
54
"qt5-base"
55
"trash-cli"
56
"xdg-utils"
57
)
58
59
case ${CARCH} in
60
"x86_64")
61
_arch="-";;
62
"aarch64")
63
_arch="-arm64-";;
64
"i686")
65
_arch="-ia32-";;
66
"*")
67
_arch="-${CARCH}-";;
68
esac
69
cd "${srcdir}/AriaNg-Native"
70
local id
71
id="$(jq -r .appId package.json)"
72
mkdir -p "${pkgdir}/opt/ariang-native" "${pkgdir}/usr/bin"
73
cp -a "dist/linux${_arch}unpacked/." \
74
"${pkgdir}/opt/ariang-native"
75
ln -s /opt/ariang-native/ariang-native \
76
"${pkgdir}/usr/bin/ariang-native"
77
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
78
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
79
80
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
81
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
82
ln -s application-metalink+xml.png \
83
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
84
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
85
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
86
install -Dm644 "${srcdir}/ariang-native.desktop" \
87
"${pkgdir}/usr/share/applications/${id}.desktop"
88
install -Dm644 LICENSE \
89
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
90
}
91
package_ariang-native-electron-git(){
92
conflicts+=("ariang-native-electron")
93
provides+=("ariang-native-electron")
94
depends+=("${_electron}" "bash")
95
pkgdesc+=' with system electron'
96
case ${CARCH} in
97
"x86_64")
98
_arch="-";;
99
"aarch64")
100
_arch="-arm64-";;
101
"i686")
102
_arch="-ia32-";;
103
"*")
104
_arch="-${CARCH}-";;
105
esac
106
cd "${srcdir}/AriaNg-Native"
107
local id
108
id="$(jq -r .appId package.json)"
109
install -Dm644 \
110
"${srcdir}/AriaNg-Native/dist/linux${_arch}unpacked/resources/app.asar" \
111
"${pkgdir}/usr/lib/ariang-native/ariang-native.asar"
112
install -Dm755 "${srcdir}/ariang-native" \
113
"${pkgdir}/usr/bin/ariang-native"
114
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
115
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
116
117
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
118
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
119
ln -s application-metalink+xml.png \
120
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
121
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
122
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
123
install -Dm644 "${srcdir}/ariang-native.desktop" \
124
"${pkgdir}/usr/share/applications/${id}.desktop"
125
sed -i "s/^electron[0-9]*/${_electron}/" "${pkgdir}/usr/bin/ariang-native"
126
install -Dm644 LICENSE \
127
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
128
}
129
Changes since previous scan
--- PKGBUILD @ 2026-09-13 00:19+++ PKGBUILD @ 2026-09-17 00:27@@ -1,7 +1,7 @@ # Maintainer: ZhangHua <zhanghuadedn at gmail dot com> pkgname=("ariang-native-git" "ariang-native-electron-git")-pkgver=1.3.14.r1.g7c4e4b5+pkgver=1.3.14.r3.g64faec7 pkgrel=1 pkgdesc="A better aria2 desktop frontend than AriaNg." license=("MIT")@@ -26,6 +26,7 @@ } build(){ cd "${srcdir}/AriaNg-Native"+ export npm_config_allow_git=all npm install main_depends=$(jq -r .mainDependencies[] package.json) && \ npm install --save=false ${main_depends[@]}Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 1 |
| 2026-09-16 00:03:17 | Low | 1 |
| 2026-09-15 00:25:31 | Low | 1 |
| 2026-09-14 00:27:57 | Low | 1 |
| 2026-09-13 03:13:35 | Low | 1 |
| 2026-09-13 00:19:54 | Low | 1 |
| 2026-09-12 00:25:17 | Low | 1 |
| 2026-09-11 00:19:22 | Low | 1 |
| 2026-09-10 00:22:44 | Low | 1 |
| 2026-09-09 00:04:09 | Low | 1 |
| 2026-09-08 00:18:08 | Low | 1 |
| 2026-09-07 00:30:15 | Low | 1 |
| 2026-09-06 00:17:06 | Low | 1 |
| 2026-09-05 00:16:27 | Low | 1 |
| 2026-09-04 00:03:13 | Low | 1 |
| 2026-09-03 00:15:47 | Low | 1 |
| 2026-09-02 00:02:31 | Low | 1 |
| 2026-09-01 00:11:19 | Low | 1 |
| 2026-08-31 00:19:57 | Low | 1 |
| 2026-08-30 00:04:14 | Low | 1 |