ariang-native-git
LOW
maintainer ZhangHua
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The variable-named package installation refers to a local variable '_electron' set to 'electron22', a known AUR package, and is used in a standard dependency declaration, posing no supply-chain risk.
Triggered rules
Low
AI review of an ambiguous pattern
llm_review
The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it LOW (confidence 95%): The variable-named package installation refers to a local variable '_electron' set to 'electron22', a known AUR package, and is used in a standard dependency declaration, posing no supply-chain risk.
-
PKGBUILD:32
npm install --save=false ${main_depends[@]}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: ZhangHua <zhanghuadedn at gmail dot com>
2
3
pkgname=("ariang-native-git" "ariang-native-electron-git")
4
pkgver=1.3.14.r3.g64faec7
5
pkgrel=1
6
pkgdesc="A better aria2 desktop frontend than AriaNg."
7
license=("MIT")
8
depends=("shared-mime-info" "hicolor-icon-theme")
9
makedepends=("npm" "git" "imagemagick" "jq")
10
arch=("x86_64" "aarch64" "i686")
11
url="https://github.com/mayswind/AriaNg-Native"
12
provides=("ariang-native")
13
conflicts=("ariang-native")
14
source=(
15
"git+${url}.git#branch=master"
16
"ariang-native"
17
"ariang-native.desktop")
18
sha256sums=('SKIP'
19
'2b6381f00d83250adc398c4db273ac47104c459c55b3191be908b108d8ae277d'
20
'56575bb86f952a0fb3f266d5e5824eb37b14e3015f99fae53950eef2f183d9ad')
21
_electron=electron22
22
23
pkgver(){
24
cd "${srcdir}/AriaNg-Native"
25
git describe --long --tags | sed 's/^v//;s/-/.r/;s/-/./g'
26
}
27
build(){
28
cd "${srcdir}/AriaNg-Native"
29
export npm_config_allow_git=all
30
npm install
31
main_depends=$(jq -r .mainDependencies[] package.json) && \
32
npm install --save=false ${main_depends[@]}
33
npm run generate-build-json
34
npm run copy-main-dependencies
35
npm run copy-app-dependencies
36
PATH=node_modules/.bin:$PATH electron-builder --linux --dir
37
cd assets
38
magick AriaNg.ico[0] ariang-native.png
39
magick AriaNg_Metalink.ico[0] ariang-native-metalink.png
40
magick AriaNg_Torrent.ico[0] ariang-native-torrent.png
41
}
42
package_ariang-native-git(){
43
depends+=(
44
# Depends from aur/electron22
45
"c-ares" "gcc-libs" "glibc" "gtk3" "libgtk-3.so" "libevent" "nss" "wayland"
46
"zlib" "fontconfig" "woff2" "aom" "brotli" "libjpeg-turbo" "icu" "dav1d" "flac"
47
"snappy" "libdrm" "libxml2" "ffmpeg" "libwebp" "minizip" "opus" "harfbuzz"
48
"jsoncpp" "libxslt" "libpng" "freetype2"
49
)
50
optdepends+=(
51
"kde-cli-tools"
52
"libappindicator-gtk3"
53
"pipewire"
54
"qt5-base"
55
"trash-cli"
56
"xdg-utils"
57
)
58
59
case ${CARCH} in
60
"x86_64")
61
_arch="-";;
62
"aarch64")
63
_arch="-arm64-";;
64
"i686")
65
_arch="-ia32-";;
66
"*")
67
_arch="-${CARCH}-";;
68
esac
69
cd "${srcdir}/AriaNg-Native"
70
local id
71
id="$(jq -r .appId package.json)"
72
mkdir -p "${pkgdir}/opt/ariang-native" "${pkgdir}/usr/bin"
73
cp -a "dist/linux${_arch}unpacked/." \
74
"${pkgdir}/opt/ariang-native"
75
ln -s /opt/ariang-native/ariang-native \
76
"${pkgdir}/usr/bin/ariang-native"
77
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
78
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
79
80
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
81
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
82
ln -s application-metalink+xml.png \
83
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
84
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
85
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
86
install -Dm644 "${srcdir}/ariang-native.desktop" \
87
"${pkgdir}/usr/share/applications/${id}.desktop"
88
install -Dm644 LICENSE \
89
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
90
}
91
package_ariang-native-electron-git(){
92
conflicts+=("ariang-native-electron")
93
provides+=("ariang-native-electron")
94
depends+=("${_electron}" "bash")
95
pkgdesc+=' with system electron'
96
case ${CARCH} in
97
"x86_64")
98
_arch="-";;
99
"aarch64")
100
_arch="-arm64-";;
101
"i686")
102
_arch="-ia32-";;
103
"*")
104
_arch="-${CARCH}-";;
105
esac
106
cd "${srcdir}/AriaNg-Native"
107
local id
108
id="$(jq -r .appId package.json)"
109
install -Dm644 \
110
"${srcdir}/AriaNg-Native/dist/linux${_arch}unpacked/resources/app.asar" \
111
"${pkgdir}/usr/lib/ariang-native/ariang-native.asar"
112
install -Dm755 "${srcdir}/ariang-native" \
113
"${pkgdir}/usr/bin/ariang-native"
114
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native.png" \
115
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/${id}.png"
116
117
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-metalink.png" \
118
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink+xml.png"
119
ln -s application-metalink+xml.png \
120
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-metalink4+xml.png"
121
install -Dm644 "${srcdir}/AriaNg-Native/assets/ariang-native-torrent.png" \
122
"${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/application-x-bittorrent.png"
123
install -Dm644 "${srcdir}/ariang-native.desktop" \
124
"${pkgdir}/usr/share/applications/${id}.desktop"
125
sed -i "s/^electron[0-9]*/${_electron}/" "${pkgdir}/usr/bin/ariang-native"
126
install -Dm644 LICENSE \
127
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
128
}
129
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 1 |
| 2026-10-31 00:07:41 | Low | 1 |
| 2026-10-30 00:29:30 | Low | 1 |
| 2026-10-29 00:13:55 | Low | 1 |
| 2026-10-28 00:06:54 | Low | 1 |
| 2026-10-27 00:23:28 | Low | 1 |
| 2026-10-26 00:12:40 | Low | 1 |
| 2026-10-25 00:20:48 | Low | 1 |
| 2026-10-24 00:14:55 | Low | 1 |
| 2026-10-23 00:02:19 | Low | 1 |
| 2026-10-22 00:13:10 | Low | 1 |
| 2026-10-21 00:12:50 | Low | 1 |
| 2026-10-20 00:10:31 | Low | 1 |
| 2026-10-19 00:03:55 | Low | 1 |
| 2026-10-18 00:06:55 | Low | 1 |
| 2026-10-17 00:21:55 | Low | 1 |
| 2026-10-16 00:12:47 | Low | 1 |
| 2026-10-15 00:28:05 | Low | 1 |
| 2026-10-14 00:06:47 | Low | 1 |
| 2026-10-13 00:23:45 | Low | 1 |