clevo-indicator-dual

maintainer hajilok · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a publicly accessible Git repository with a recent tag, applies a minor patch from a trusted GitHub raw content URL, and installs a setuid binary for hardware access, which is expected for this type of fan control utility; the low severity is due to few votes and recent upload, but the source and build process are transparent and consistent with the described functionality.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a publicly accessible Git repository with a recent tag, applies a minor patch from a trusted GitHub raw content URL, and installs a setuid binary for hardware access, which is expected for this type of fan control utility; the low severity is due to few votes and recent upload, but the source and build process are transparent and consistent with the described functionality.

PKGBUILD

      1# Maintainer: Imam Wahyu Widodo <https://github.com/hajilok>
    
      2pkgname=clevo-indicator-dual
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5pkgdesc="Linux dual-fan control (CPU + GPU) for Clevo-based laptops and Axioo rebrands. Fork of clevo-indicator that drives BOTH fans instead of only the CPU fan."
    
      6arch=('x86_64')
    
      7url="https://github.com/hajilok/clevo-axioo-dual-fan-linux"
    
      8license=('GPL2')
    
      9depends=(
    
      10    'glib2'
    
      11    'gtk3'
    
      12    'libayatana-appindicator'
    
      13)
    
      14makedepends=(
    
      15    'base-devel'
    
      16    'git'
    
      17    'pkgconf'
    
      18)
    
      19optdepends=(
    
      20    'breeze-icons: provides the tray icons (temperature-warm/normal/cold)'
    
      21)
    
      22install=clevo-indicator-dual.install
    
      23source=(
    
      24    "${pkgname}::git+${url}.git#tag=v${pkgver}"
    
      25    "https://raw.githubusercontent.com/hajilok/clevo-axioo-dual-fan-linux/v${pkgver}/arch-build-fix.patch"
    
      26)
    
      27sha256sums=('SKIP'
    
      28            'SKIP')
    
      29
    
      30prepare() {
    
      31    cd "${pkgname}"
    
      32    # Apply fix for Ayatana API + Breeze icon names — see patch header for details
    
      33    patch -p1 -i "${srcdir}/arch-build-fix.patch"
    
      34}
    
      35
    
      36build() {
    
      37    cd "${pkgname}"
    
      38    make
    
      39}
    
      40
    
      41package() {
    
      42    cd "${pkgname}"
    
      43    # Install to /usr/bin (Arch convention; upstream Makefile hard-codes /usr/local/bin
    
      44    # which is NOT in $PATH on a default Arch install). Set setuid root so the
    
      45    # binary can access EC IO ports; the launcher detects root and self-escalates
    
      46    # the GUI portion to the desktop user.
    
      47    install -Dm4750 -g wheel -t "${pkgdir}/usr/bin/" "bin/clevo-indicator-dual"
    
      48    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      49}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 03:18:55	LOW	2