avia-client

LOW

maintainer Reycko 0 votes scanned 2026-08-28 15:35:42.469825

View on AUR

Why flagged

The package builds from the project's own git source with a SKIP'd checksum on the git repo, which is common for AUR packages; no remote code execution or malicious payloads are present, and the rest of the sources are verified.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git source with a SKIP'd checksum on the git repo, which is common for AUR packages; no remote code execution or malicious payloads are present, and the rest of the sources are verified.

PKGBUILD

      1_pkgname="avia-client"
    
      2pkgname="${_pkgname}"
    
      3pkgver="1.8.4"
    
      4pkgrel=1
    
      5pkgdesc="The Stoat Client you actually want"
    
      6license=( 'AGPL-3.0-or-later' )
    
      7arch=( 'x86_64' )
    
      8url="https://github.com/AvaLilac/for-desktop"
    
      9source_x86_64=("${_pkgname}-source::git+${url}.git#tag=${pkgver}"
    
      10               "avia-client.desktop"
    
      11               "avia-client.sh")
    
      12
    
      13sha256sums_x86_64=('SKIP'
    
      14                   '1de3db56b7395f6f7c040e1f4ef794c1541275b60faf8cad94d1ddf2274fecfe'
    
      15                   '7470cc1f570087a48f432174a49c880e5424796cf79dccb5fac8a5354042d8e3')
    
      16makedepends=('git'
    
      17			 'nodejs' 'pnpm-bin'
    
      18			 'rust') # node-pipewire
    
      19conflicts=( 'avia-client-bin' 'avia-client-git' )
    
      20
    
      21prepare() {
    
      22	cd "$srcdir/$_pkgname-source"
    
      23	git submodule update --init --recursive --depth 1 || git submodule --init --recursive
    
      24
    
      25	# This is a bit weird, I don't know why Avia requires this
    
      26	# Update Stoat assets
    
      27	git -c submodule."assets".update=checkout submodule update --init assets
    
      28}
    
      29
    
      30build() {
    
      31	cd "$srcdir/$_pkgname-source"
    
      32	pnpm install --frozen-lockfile
    
      33
    
      34	pnpm package
    
      35}
    
      36
    
      37package() {
    
      38	mkdir -p "$pkgdir/opt/avia-client" && cp -r "$srcdir/$_pkgname-source/out/AviaClient-linux-x64/." "$pkgdir/opt/avia-client/"
    
      39
    
      40	install -Dm644 "$srcdir/avia-client.desktop" "$pkgdir/usr/share/applications/avia-client.desktop"
    
      41
    
      42	install -Dm755 "$srcdir/avia-client.sh" "$pkgdir/usr/bin/avia-client"
    
      43	ln -sf "../../opt/avia-client/aviaclient-desktop" "$pkgdir/usr/bin/avia-client.bin"
    
      44}
    
      45
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-28 15:35:42	Low	2