babry-bin

LOW

maintainer kregonia 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release under the maintainer's fork, which is a supply-chain risk due to lack of verifiable build process, but it is not actively malicious; the binary is installed directly and no obfuscated or remote code execution is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a GitHub release under the maintainer's fork, which is a supply-chain risk due to lack of verifiable build process, but it is not actively malicious; the binary is installed directly and no obfuscated or remote code execution is present.

PKGBUILD

      1# Maintainer: kregonia <jiangchenglu2004@gmail.com>
    
      2
    
      3pkgname=babry-bin
    
      4pkgver=0.1.1
    
      5pkgrel=1
    
      6pkgdesc="Smart boundary-aware screenshot tool for Linux Wayland"
    
      7arch=('x86_64')
    
      8url="https://github.com/kregonia/babry"
    
      9license=('Apache-2.0')
    
      10depends=('fontconfig' 'libxkbcommon' 'wayland' 'grim' 'wl-clipboard')
    
      11optdepends=('libnotify: desktop notifications')
    
      12provides=('babry')
    
      13conflicts=('babry')
    
      14source_x86_64=("${pkgname}-${pkgver}::https://github.com/kregonia/babry/releases/download/v${pkgver}/babry-linux-amd64-v${pkgver}")
    
      15source=("LICENSE-${pkgver}::https://raw.githubusercontent.com/kregonia/babry/v${pkgver}/LICENSE")
    
      16sha256sums=('c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4')
    
      17sha256sums_x86_64=('d739b5cdc17a49f7c249d02f3afd3838a2e0ed5d3443168eef368174ca92614c')
    
      18
    
      19package() {
    
      20    install -Dm755 "${srcdir}/${pkgname}-${pkgver}" "${pkgdir}/usr/bin/babry"
    
      21    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      22}
    
      23

Changes since previous scan

--- PKGBUILD @ 2026-10-14 00:06
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,19 +1,20 @@
 # Maintainer: kregonia <jiangchenglu2004@gmail.com>
 
 pkgname=babry-bin
-pkgver=0.1.0
-pkgrel=2
+pkgver=0.1.1
+pkgrel=1
 pkgdesc="Smart boundary-aware screenshot tool for Linux Wayland"
 arch=('x86_64')
 url="https://github.com/kregonia/babry"
 license=('Apache-2.0')
-depends=('fontconfig' 'libxkbcommon' 'wayland')
+depends=('fontconfig' 'libxkbcommon' 'wayland' 'grim' 'wl-clipboard')
+optdepends=('libnotify: desktop notifications')
 provides=('babry')
 conflicts=('babry')
-source_x86_64=("${pkgname}-${pkgver}::https://github.com/kregonia/babry/releases/download/v${pkgver}/babry-amd64-linux")
+source_x86_64=("${pkgname}-${pkgver}::https://github.com/kregonia/babry/releases/download/v${pkgver}/babry-linux-amd64-v${pkgver}")
 source=("LICENSE-${pkgver}::https://raw.githubusercontent.com/kregonia/babry/v${pkgver}/LICENSE")
 sha256sums=('c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4')
-sha256sums_x86_64=('7a7887d7a654fc4088d44ac87e91b0599f77d85c9698b9a3fcc2f576c0d05b39')
+sha256sums_x86_64=('d739b5cdc17a49f7c249d02f3afd3838a2e0ed5d3443168eef368174ca92614c')
 
 package() {
     install -Dm755 "${srcdir}/${pkgname}-${pkgver}" "${pkgdir}/usr/bin/babry"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 15:20:15	Low	2
2026-10-14 00:06:47	Medium	2
2026-10-13 00:23:45	Medium	2
2026-10-12 00:18:51	Medium	2
2026-10-11 17:10:51	Medium	2