boxbox-bin

LOW

maintainer jR4dh3y 0 votes scanned 2026-10-31 19:58:49.989948

View on AUR

Why flagged

The package downloads a prebuilt binary from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; while the host is not on all whitelists, it is a trusted and official source, and the binary is not obfuscated or executed in a risky manner.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a common and acceptable practice for AUR packages; while the host is not on all whitelists, it is a trusted and official source, and the binary is not obfuscated or executed in a risky manner.

PKGBUILD

      1# Maintainer: Radhey Kalra <radheykalra901@gmail.com>
    
      2pkgname=boxbox-bin
    
      3pkgver=0.3.2
    
      4pkgrel=1
    
      5pkgdesc='Desktop file manager for local files and self-hosted BoxBox servers'
    
      6arch=('x86_64')
    
      7url='https://github.com/jR4dh3y/BoxBox'
    
      8license=('MIT')
    
      9depends=('gtk3' 'webkit2gtk-4.1' 'libayatana-appindicator' 'librsvg'
    
      10         'xdg-utils' 'nss' 'alsa-lib' 'libcups' 'libxcomposite' 'libxdamage'
    
      11         'libxrandr' 'libxkbcommon' 'mesa')
    
      12optdepends=('wl-clipboard: Wayland file clipboard'
    
      13            'xclip: X11 file clipboard'
    
      14            'python-gobject: interoperable file cut and copy'
    
      15            'gtk4: interoperable file cut and copy'
    
      16            'ffmpeg: video and audio thumbnails'
    
      17            'poppler: PDF thumbnails')
    
      18provides=('boxbox')
    
      19conflicts=('boxbox')
    
      20options=('!strip' '!debug')
    
      21_archive_sha256=00123b7286f07b48fcc73f024d1c84ce6057c555ecc97400446ee451d552a19d
    
      22source=("$url/releases/download/v$pkgver/boxbox-desktop-v$pkgver-linux-amd64.tar.gz"
    
      23        'AppRun' 'boxbox.desktop' 'boxbox.svg')
    
      24sha256sums=("$_archive_sha256"
    
      25            '3ffde00675a52d6f495fdff0ed18f6c032b549a7f8d91ddcf957a5d11507057b'
    
      26            'db028c3b873f6b25c3c794508b87b860b4afd4289b277f40c17666e3937497b3'
    
      27            'c0ed7b2cb1de5e4dc74cf01d60ef429ac6067b3cb2a9c33781240173e47cc96d')
    
      28
    
      29package() {
    
      30  local bundle="boxbox-desktop-v$pkgver-linux-amd64"
    
      31  install -dm755 "$pkgdir/usr/lib/boxbox"
    
      32  cp -a "$srcdir/$bundle/BoxBox" "$pkgdir/usr/lib/boxbox/BoxBox"
    
      33  install -Dm755 AppRun "$pkgdir/usr/lib/boxbox/AppRun"
    
      34  install -dm755 "$pkgdir/usr/bin"
    
      35  ln -s /usr/lib/boxbox/AppRun "$pkgdir/usr/bin/boxbox"
    
      36  install -Dm644 boxbox.desktop "$pkgdir/usr/share/applications/io.boxbox.desktop"
    
      37  install -Dm644 boxbox.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/io.boxbox.desktop.svg"
    
      38  install -Dm644 "$srcdir/$bundle/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 19:58:49	Low	2