browseros-neo-bin

LOW

maintainer Ishan-Parihar 0 votes scanned 2026-09-16 11:22:36.378817

View on AUR

Why flagged

The package auto-updates by fetching prebuilt .deb binaries from the project's own GitHub releases, which is normal for rolling-release AUR packages; the binary origin is unverified but from a plausibly project-owned source, and no malicious behavior or code execution beyond standard installation is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package auto-updates by fetching prebuilt .deb binaries from the project's own GitHub releases, which is normal for rolling-release AUR packages; the binary origin is unverified but from a plausibly project-owned source, and no malicious behavior or code execution beyond standard installation is present.

PKGBUILD

      1# Maintainer: Ishan Parihar <ishan@example.com>
    
      2# Upstream: https://github.com/browseros-ai/BrowserOS (browserclaw/*)
    
      3# Maintenance-free: pkgver() fetches latest browserclaw/v* tag; prepare() resolves
    
      4# the asset URL via GitHub API so every `makepkg`/`yay -Syu` pulls newest without bump.
    
      5
    
      6pkgname=browseros-neo-bin
    
      7_pkgname=browserclaw
    
      8pkgver=0.50.5
    
      9pkgrel=2
    
      10pkgdesc="BrowserOS neo — AI browser for agents (Chromium 151, binary from browserclaw/* tags, auto-rolling)"
    
      11arch=('x86_64')
    
      12url="https://github.com/browseros-ai/BrowserOS"
    
      13license=('AGPL-3.0-only')
    
      14depends=('alsa-lib' 'at-spi2-core' 'atk' 'cairo' 'dbus' 'gdk-pixbuf2' 'glib2' 'gtk3'
    
      15         'libcups' 'libdrm' 'libxcomposite' 'libxdamage' 'libxrandr' 'libxkbcommon'
    
      16         'mesa' 'nspr' 'nss' 'pango' 'libx11' 'systemd-libs' 'expat' 'libxcb')
    
      17makedepends=('curl' 'jq')
    
      18optdepends=('xdg-utils: open links with xdg-open'
    
      19            'libnotify: desktop notifications'
    
      20            'apparmor: AppArmor profile at /etc/apparmor.d/browserclaw')
    
      21provides=("browseros-neo=${pkgver}" "browserclaw=${pkgver}" "${_pkgname}=${pkgver}")
    
      22conflicts=('browseros-neo' 'browserclaw' 'browseros-neo-git')
    
      23options=('!strip' '!emptydirs')
    
      24install=browseros-neo.install
    
      25source=()
    
      26sha256sums=()
    
      27
    
      28pkgver() {
    
      29  _latest=$(curl -sL "https://api.github.com/repos/browseros-ai/BrowserOS/releases?per_page=20" \
    
      30    | jq -r '[.[] | select(.tag_name | startswith("browserclaw/"))][0].tag_name' 2>/dev/null \
    
      31    | sed 's|^browserclaw/v||')
    
      32  if [[ -n "$_latest" && "$_latest" != "null" ]]; then
    
      33    printf "%s" "$_latest"
    
      34  else
    
      35    printf "%s" "0.50.5"
    
      36  fi
    
      37}
    
      38
    
      39prepare() {
    
      40  _deb="BrowserOS_neo_v${pkgver}_amd64.deb"
    
      41  _url_api=$(curl -sL "https://api.github.com/repos/browseros-ai/BrowserOS/releases/tags/browserclaw%2Fv${pkgver}" \
    
      42    | jq -r '.assets[] | select(.name=="'"$_deb"'") | .browser_download_url' 2>/dev/null)
    
      43  _urls=()
    
      44  [[ -n "$_url_api" && "$_url_api" != "null" ]] && _urls+=("$_url_api")
    
      45  _urls+=("https://github.com/browseros-ai/BrowserOS/releases/download/browserclaw%2Fv${pkgver}/${_deb}")
    
      46  _urls+=("https://github.com/browseros-ai/BrowserOS/releases/download/browserclaw/v${pkgver}/${_deb}")
    
      47
    
      48  if [[ -f "$srcdir/$_deb" ]] && bsdtar -tf "$srcdir/$_deb" >/dev/null 2>&1; then
    
      49    echo "Using cached $_deb"
    
      50  else
    
      51    rm -f "$srcdir"/BrowserOS_neo_*.deb 2>/dev/null || true
    
      52    _fetched=0
    
      53    for _u in "${_urls[@]}"; do
    
      54      echo "Trying $_u ..."
    
      55      if curl -fL -o "$srcdir/$_deb" "$_u"; then
    
      56        if bsdtar -tf "$srcdir/$_deb" >/dev/null 2>&1; then
    
      57          echo "Fetched $_deb successfully"
    
      58          _fetched=1
    
      59          break
    
      60        else
    
      61          echo "Downloaded file is not a valid deb, trying next URL"
    
      62          rm -f "$srcdir/$_deb"
    
      63        fi
    
      64      else
    
      65        echo "curl failed for $_u, trying next"
    
      66        rm -f "$srcdir/$_deb"
    
      67      fi
    
      68    done
    
      69    if [[ $_fetched -eq 0 ]]; then
    
      70      echo "ERROR: Failed to fetch $_deb from any URL" >&2
    
      71      exit 1
    
      72    fi
    
      73  fi
    
      74  bsdtar -xf "$srcdir/$_deb" -C "$srcdir"
    
      75}
    
      76
    
      77package() {
    
      78  bsdtar -xf "$srcdir/data.tar.zst" -C "$pkgdir"
    
      79  if [[ -f "$pkgdir/usr/lib/browserclaw/chrome_sandbox" ]]; then
    
      80    chmod 4755 "$pkgdir/usr/lib/browserclaw/chrome_sandbox"
    
      81  fi
    
      82  install -dm755 "$pkgdir/usr/bin"
    
      83  ln -sf /usr/bin/browserclaw "$pkgdir/usr/bin/browseros-neo" 2>/dev/null || true
    
      84  ln -sf /usr/bin/browserclaw "$pkgdir/usr/bin/browseros-neo-bin" 2>/dev/null || true
    
      85  if [[ ! -f "$pkgdir/usr/share/licenses/${pkgname}/LICENSE" ]]; then
    
      86    install -Dm644 /dev/null "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
    
      87    echo "AGPL-3.0-only — see https://github.com/browseros-ai/BrowserOS/blob/browserclaw/v${pkgver}/LICENSE" > "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
    
      88  fi
    
      89}
    
      90

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-16 11:22:36	Low	2