atomic-agent-desktop-bin
LOW
maintainer biogenic_ooze
0 votes
scanned 2026-10-27 19:48:35.153655
Why flagged
The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for AUR packages; the binary is not executed during build, and the source is verifiable via checksum, posing no immediate risk despite the low vote count and recent upload.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for AUR packages; the binary is not executed during build, and the source is verifiable via checksum, posing no immediate risk despite the low vote count and recent upload.
PKGBUILD
1
# Maintainer: Atomic Chat <support@atomic.chat>
2
#
3
# Generated from packaging/PKGBUILD-desktop.in in https://github.com/AtomicBot-ai/atomic-agent by
4
# the linux-repo workflow (scripts/linux-packages.ts pkgbuild --product desktop); change the
5
# template there, not this copy.
6
7
pkgname=atomic-agent-desktop-bin
8
pkgver=0.0.6
9
_version=0.0.6
10
pkgrel=1
11
pkgdesc='Desktop app for Atomic Agent: starts the bundled agent locally and gives it a chat window (https://atomicagent.io)'
12
arch=('x86_64' 'aarch64')
13
url='https://github.com/AtomicBot-ai/atomic-agent'
14
license=('MIT')
15
# The deb's Depends by their Arch names (gtk3, libnotify, nss, libxss, libxtst, xdg-utils,
16
# at-spi2-core, libuuid, libsecret) plus what Electron loads at run time.
17
depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'at-spi2-core' 'util-linux-libs'
18
'libsecret' 'alsa-lib' 'mesa')
19
optdepends=('libappindicator-gtk3: tray icon')
20
provides=('atomic-agent-desktop')
21
conflicts=('atomic-agent-desktop')
22
# A prebuilt Electron app with the agent's Node SEA binary inside; stripping breaks both.
23
options=('!strip' '!debug')
24
25
# The release's deb of each architecture, repacked: electron-builder makes the deb and the rpm,
26
# and the AUR package comes from the same files.
27
_base='https://github.com/AtomicBot-ai/atomic-agent/releases/download/desktop-v0.0.6'
28
source_x86_64=("${_base}/Atomic-Agent-0.0.6-amd64.deb")
29
source_aarch64=("${_base}/Atomic-Agent-0.0.6-arm64.deb")
30
sha256sums_x86_64=('35bb6386416494eb12523a4147d3e090e74367d03813c00ac6e0f04d22b1f429')
31
sha256sums_aarch64=('40c4717eacf9aba48a938cd6ff898dcc3bacf14bd302def437bd827e82646963')
32
noextract=('Atomic-Agent-0.0.6-amd64.deb' 'Atomic-Agent-0.0.6-arm64.deb')
33
34
package() {
35
local deb
36
case "${CARCH}" in
37
x86_64) deb='Atomic-Agent-0.0.6-amd64.deb' ;;
38
aarch64) deb='Atomic-Agent-0.0.6-arm64.deb' ;;
39
esac
40
41
# The deb's data archive as it is: /opt/Atomic Agent (electron-builder's layout, which the app's
42
# own paths assume), the .desktop file and the icons. Debian's changelog is not for pacman.
43
mkdir -p "${srcdir}/deb"
44
bsdtar -xf "${srcdir}/${deb}" -C "${srcdir}/deb"
45
bsdtar -xf "${srcdir}"/deb/data.tar.* -C "${pkgdir}"
46
rm -rf "${pkgdir}/usr/share/doc"
47
48
# What the deb's postinst does: the command on PATH, and chrome-sandbox without SUID, since an
49
# Arch kernel has user namespaces (the postinst makes the same choice on such kernels).
50
install -dm755 "${pkgdir}/usr/bin"
51
ln -s '/opt/Atomic Agent/atomic-agent-desktop' "${pkgdir}/usr/bin/atomic-agent-desktop"
52
chmod 755 "${pkgdir}/opt/Atomic Agent/chrome-sandbox"
53
54
install -Dm644 "${pkgdir}/opt/Atomic Agent/resources/LICENSE.txt" \
55
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
56
}
57
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 19:48:35 | Low | 2 |