bb-desktop-bin

LOW

maintainer s-k 0 votes scanned 2026-11-04 10:06:54.832549

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub release, which is a normal distribution method for such applications; the flagged low votes and recent upload are metadata issues, not security risks.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub release, which is a normal distribution method for such applications; the flagged low votes and recent upload are metadata issues, not security risks.

PKGBUILD

      1_pkgname=bb-desktop
    
      2pkgname=${_pkgname}-bin
    
      3pkgver=0.48.1
    
      4pkgrel=1
    
      5pkgdesc='Agentic IDE for orchestrating coding agents (official AppImage)'
    
      6arch=('x86_64')
    
      7url='https://github.com/get-bb/bb'
    
      8license=('MIT')
    
      9depends=(
    
      10  'alsa-lib'
    
      11  'at-spi2-core'
    
      12  'bash'
    
      13  'cairo'
    
      14  'dbus'
    
      15  'expat'
    
      16  'gdk-pixbuf2'
    
      17  'git'
    
      18  'glib2'
    
      19  'glibc'
    
      20  'gtk3'
    
      21  'libcups'
    
      22  'libgcc'
    
      23  'libnotify'
    
      24  'libstdc++'
    
      25  'libx11'
    
      26  'libxcb'
    
      27  'libxcomposite'
    
      28  'libxdamage'
    
      29  'libxext'
    
      30  'libxfixes'
    
      31  'libxkbcommon'
    
      32  'libxrandr'
    
      33  'mesa'
    
      34  'nspr'
    
      35  'nss'
    
      36  'pango'
    
      37  'systemd-libs'
    
      38  'xdg-utils'
    
      39)
    
      40optdepends=(
    
      41  'libappindicator: system tray integration'
    
      42  'xdg-desktop-portal: desktop integration on Wayland'
    
      43)
    
      44provides=("${_pkgname}=${pkgver}")
    
      45conflicts=("${_pkgname}")
    
      46options=('!debug' '!strip')
    
      47
    
      48# makepkg archives with LANG=C; bundled provider recordings have Unicode names.
    
      49export LC_CTYPE=C.UTF-8
    
      50
    
      51_appimage="bb-${pkgver}-x86_64.AppImage"
    
      52source=(
    
      53  "${_appimage}::${url}/releases/download/desktop-v${pkgver}/${_appimage}"
    
      54  "${_pkgname}-${pkgver}-LICENSE::https://raw.githubusercontent.com/get-bb/bb/desktop-v${pkgver}/LICENSE"
    
      55)
    
      56noextract=("${_appimage}")
    
      57sha256sums=(
    
      58  'df04e14d4735ed0b0922bb6b16a833bece5f45356a63de7d4d847bf7b1d2ced1'
    
      59  'd10816aa30183af920bdd789a81b16847bcf3e287e1b3419dd7d85f6e3e8e7b0'
    
      60)
    
      61
    
      62prepare() {
    
      63  chmod +x "${srcdir}/${_appimage}"
    
      64  rm -rf "${srcdir}/squashfs-root"
    
      65  "${srcdir}/${_appimage}" --appimage-extract >/dev/null
    
      66
    
      67  if [[ ! -x "${srcdir}/squashfs-root/bb" ||
    
      68        ! -f "${srcdir}/squashfs-root/chrome-sandbox" ]]; then
    
      69    error 'The AppImage is missing its executable or Chromium sandbox.'
    
      70    return 1
    
      71  fi
    
      72}
    
      73
    
      74package() {
    
      75  install -d "${pkgdir}/opt/${_pkgname}"
    
      76  cp -a --no-preserve=ownership "${srcdir}/squashfs-root/." \
    
      77    "${pkgdir}/opt/${_pkgname}/"
    
      78  chmod -R u=rwX,go=rX "${pkgdir}/opt/${_pkgname}"
    
      79  chmod 4755 "${pkgdir}/opt/${_pkgname}/chrome-sandbox"
    
      80
    
      81  # Do not use AppRun: it prepends its bb binary to PATH and may add --no-sandbox.
    
      82  # Keep /usr/bin/bb available for Babashka or a separately installed bb CLI.
    
      83  install -Dm755 /dev/stdin "${pkgdir}/usr/bin/${_pkgname}" <<'EOF'
    
      84#!/bin/sh
    
      85exec /opt/bb-desktop/bb "$@"
    
      86EOF
    
      87
    
      88  # The AppImage only supplies a 1024px icon; pixmaps avoids hicolor size limits.
    
      89  install -Dm644 "${srcdir}/squashfs-root/bb.png" \
    
      90    "${pkgdir}/usr/share/pixmaps/${_pkgname}.png"
    
      91
    
      92  install -Dm644 "${srcdir}/squashfs-root/bb.desktop" \
    
      93    "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      94  sed -i \
    
      95    -e "s|^Exec=.*|Exec=${_pkgname} %U|" \
    
      96    -e "s|^Icon=.*|Icon=${_pkgname}|" \
    
      97    -e '/^X-AppImage-Version=/d' \
    
      98    "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      99
    
      100  install -Dm644 "${srcdir}/${_pkgname}-${pkgver}-LICENSE" \
    
      101    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      102  install -Dm644 "${srcdir}/squashfs-root/LICENSE.electron.txt" \
    
      103    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.electron.txt"
    
      104  install -Dm644 "${srcdir}/squashfs-root/LICENSES.chromium.html" \
    
      105    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html"
    
      106}
    
      107

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 10:06:54	Low	2