biri-git

LOW

maintainer Ammonium 0 votes scanned 2026-08-19 19:42:09.088000

View on AUR

Why flagged

The package builds from a public git fork with a SKIP'd checksum, but it is a legitimate source for a modified version of niri; no remote code execution or malicious payloads are present, and the build process is standard for AUR Rust packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git fork with a SKIP'd checksum, but it is a legitimate source for a modified version of niri; no remote code execution or malicious payloads are present, and the build process is standard for AUR Rust packages.

PKGBUILD

      1# Maintainer: Ammonium <diego.garcia.cr@gmail.com>
    
      2## This is a modified version of the original PKGBUILD for niri-git,
    
      3## Made to build from the barrulus/biri fork
    
      4## Credit to the original PKGBUILD code goes to their maintainers (see below)
    
      5
    
      6# Maintainer: cosmo <aur@dawnson.is>
    
      7# Maintainer: FreeFull <jazz2rulez@gmail.com>
    
      8# Contributor: Julius Michaelis <gitter@liftm.de.de>
    
      9# Contributor: Nebulosa  <nebulosa2007-at-yandex-dot-ru>
    
      10
    
      11## The following variable can be customized at build time.
    
      12## Use env or export to change at your wish
    
      13##
    
      14##   Example: env _sccache=y makepkg -sc
    
      15##
    
      16## Default is: None => not use sccache
    
      17##
    
      18## More info: https://github.com/mozilla/sccache
    
      19: ${_sccache:=}
    
      20
    
      21pkgname=biri-git
    
      22pkgver=26.04.r308.g999613f
    
      23pkgrel=1
    
      24pkgdesc="Niri compositor soft-fork with several added quality of life features"
    
      25arch=(x86_64 aarch64)
    
      26url="https://github.com/barrulus/${pkgname%-git}"
    
      27license=(GPL-3.0-or-later)
    
      28depends=(cairo glib2 libdisplay-info libinput libpipewire libxkbcommon mesa pango pixman seatd)
    
      29makedepends=(clang rust git)
    
      30[[ -n "${_sccache}" ]] && makedepends+=(sccache)
    
      31optdepends=('fuzzel: application launcher similar to rofi drun mode'
    
      32            'waybar: highly customizable Wayland bar'
    
      33            'alacritty: a cross-platform OpenGL terminal emulator'
    
      34            'mako: notification daemon for Wayland'
    
      35            'swaybg: wallpaper tool for Wayland compositors'
    
      36            'swaylock: screen locker for Wayland'
    
      37            'xdg-desktop-portal-gtk: implements most of the basic functionality'
    
      38            'xdg-desktop-portal-gnome: screencasting support'
    
      39            'gnome-keyring: implements the secret portal, for certain apps to work'
    
      40            'polkit-gnome: when apps need to ask for root permissions')
    
      41provides=("niri=${pkgver}")
    
      42conflicts=("niri-bin" "niri")
    
      43options=(!debug !lto !strip)
    
      44source=("${pkgname%-git}::git+$url.git")
    
      45b2sums=('SKIP')
    
      46
    
      47pkgver() {
    
      48  cd "${pkgname%-git}"
    
      49  # This fork doesn't push tags to its own remote, but its history is a
    
      50  # direct continuation of upstream niri's, so pull niri's tags in to
    
      51  # describe against instead.
    
      52  git remote get-url upstream &>/dev/null || git remote add upstream "https://github.com/YaLTeR/niri.git"
    
      53  git fetch -q upstream 'refs/tags/*:refs/tags/*'
    
      54  git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      55}
    
      56
    
      57prepare() {
    
      58  cd "${pkgname%-git}"
    
      59  # Tuning cargo
    
      60  export CARGO_HOME="${srcdir}/${pkgname%-git}/.cargo"    # Download all to src directory, not in ~/.cargo
    
      61
    
      62  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      63}
    
      64
    
      65build() {
    
      66  cd "${pkgname%-git}"
    
      67
    
      68  # Tuning rust compiler
    
      69  [[ -n "${_sccache}" ]] && export RUSTC_WRAPPER=sccache  # If $_sccache not empty, build using binary cache
    
      70
    
      71  # Tuning cargo
    
      72  export CARGO_HOME="${srcdir}/${pkgname%-git}/.cargo"    # Use downloaded earlier from src directory, not from ~/.cargo
    
      73  export CARGO_TARGET_DIR=target                        # Place the output in target relative to the current directory
    
      74
    
      75  cargo build --frozen --release
    
      76}
    
      77
    
      78package() {
    
      79  cd "${pkgname%-git}"
    
      80  install -Dm755 "target/release/niri"                       -t "${pkgdir}/usr/bin/"
    
      81  install -Dm755 "resources/niri-session"                    -t "${pkgdir}/usr/bin/"
    
      82  install -Dm644 resources/default-config.kdl                         -t "${pkgdir}/usr/share/doc/niri"
    
      83  install -Dm644 "resources/niri.desktop"                    -t "${pkgdir}/usr/share/wayland-sessions/"
    
      84  install -Dm644 "resources/niri-portals.conf"               -t "${pkgdir}/usr/share/xdg-desktop-portal/"
    
      85  install -Dm644 "resources/niri"{.service,-shutdown.target} -t "${pkgdir}/usr/lib/systemd/user/"
    
      86}
    
      87

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-19 19:42:09	Low	2