clarion-shell-bin

LOW

maintainer illusory 0 votes scanned 2026-10-17 09:17:40.511065

View on AUR

Why flagged

Package installs a prebuilt binary from a GitHub release, which is a normal distribution method for AUR packages; the source is from a plausible project maintainer's fork, and while the host is not whitelisted, the content is a standard Arch package with no evidence of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package installs a prebuilt binary from a GitHub release, which is a normal distribution method for AUR packages; the source is from a plausible project maintainer's fork, and while the host is not whitelisted, the content is a standard Arch package with no evidence of malicious behavior.

PKGBUILD

      1# Maintainer: Become-ILLUSORY <becomeillusory@gmail.com>
    
      2#
    
      3# ── 上游源码仓库 / upstream source ────────────────────────────────────────────
    
      4#   https://github.com/123llyrr/clarion   (clarion-shell/ 子目录)
    
      5#
    
      6# 本包是 Clarion 桌面 Shell 的预编译二进制（Flutter + GTK3）。
    
      7# 注意：这不是 x86-64-v3 构建 —— 只有约 3.4k 行 GTK runner 在本地编译，
    
      8# 39k 行 Dart 由工具链做 AOT 快照，引擎 libflutter_linux_gtk.so 是预编译下载，
    
      9# 因此按基线 x86-64 发布，任何 x86-64 机器都能运行。
    
      10#
    
      11# 构建流水线 / build pipeline:
    
      12#   https://github.com/Become-ILLUSORY/clarion/blob/feat/arch-v3-build/.github/workflows/build-shell.yml
    
      13# ─────────────────────────────────────────────────────────────────────────────
    
      14
    
      15pkgname=clarion-shell-bin
    
      16pkgver=0.1.0.r4.gb584c83
    
      17pkgrel=1
    
      18pkgdesc='Flutter desktop shell for the Clarion Wayland compositor (top bar, dock, launcher, control center)'
    
      19arch=('x86_64')
    
      20url='https://github.com/123llyrr/clarion'
    
      21license=('GPL-3.0-or-later')
    
      22
    
      23_repo='Become-ILLUSORY/clarion'
    
      24
    
      25# Shell 是合成器的 layer-shell 客户端，并通过 Clarion IPC 通信，因此硬依赖
    
      26# 合成器。反过来 clarion 不依赖本包 —— 它也能配 waybar / Noctalia /
    
      27# DankMaterialShell，或者完全不要面板。
    
      28depends=(
    
      29  'clarion'
    
      30  'gcc-libs'
    
      31  'glib2'
    
      32  'glibc'
    
      33  'gtk3'
    
      34  'gtk-layer-shell'
    
      35  'harfbuzz'
    
      36  'pango'
    
      37  'wayland'
    
      38)
    
      39optdepends=(
    
      40  'xdg-desktop-portal-gtk: fallback portal implementation'
    
      41)
    
      42provides=('clarion-shell')
    
      43conflicts=('clarion-shell' 'clarion-shell-git')
    
      44
    
      45_archive="clarion-shell-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst"
    
      46
    
      47# 下载的就是完整 Arch 包，禁止 makepkg 自动解压。
    
      48noextract=("${_archive}")
    
      49
    
      50source=("${_archive}::https://github.com/${_repo}/releases/download/v${pkgver}/${_archive}")
    
      51sha256sums=('7d57ca65076c91609dd5cbbb65057bc556127b67b7221dbbd6ca6f12a821d8f6')
    
      52
    
      53package() {
    
      54  bsdtar -xf "${srcdir}/${_archive}" -C "${pkgdir}" \
    
      55    --exclude .PKGINFO --exclude .MTREE --exclude .BUILDINFO
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 09:17:40	Low	2