clovercut-bin

LOW

maintainer 9M2PJU 0 votes scanned 2026-10-27 17:48:24.924245

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal AUR practice; the AppImage is checksummed, and no remote code execution or malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub releases, which is a normal AUR practice; the AppImage is checksummed, and no remote code execution or malicious behavior is present.

PKGBUILD

      1# Maintainer: 9M2PJU <https://github.com/9M2PJU>
    
      2# Upstream: https://github.com/tulcoturo/clovercut
    
      3# AUR package: clovercut-bin (prebuilt AppImage from GitHub releases).
    
      4# To update for a new release: bump pkgver, replace both sha256sums with the
    
      5# matching lines from the release's SHA256SUMS file, regenerate .SRCINFO with
    
      6# `makepkg --printsrcinfo > .SRCINFO`, then push this directory to AUR.
    
      7pkgname=clovercut-bin
    
      8pkgver=0.1.8
    
      9pkgrel=1
    
      10pkgdesc="Desktop-first, open-source video editor with built-in stock libraries and local AI"
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://github.com/tulcoturo/clovercut"
    
      13license=('AGPL-3.0-or-later')
    
      14depends=('hicolor-icon-theme' 'gtk3' 'fontconfig' 'freetype2' 'libxkbcommon' 'libxkbcommon-x11' 'mesa' 'alsa-lib')
    
      15options=('!strip' '!debug')
    
      16provides=('clovercut')
    
      17conflicts=('clovercut')
    
      18source_x86_64=("Clovercut-${pkgver}-x86_64.AppImage::https://github.com/tulcoturo/clovercut/releases/download/v${pkgver}/Clovercut-${pkgver}-x86_64.AppImage")
    
      19source_aarch64=("Clovercut-${pkgver}-aarch64.AppImage::https://github.com/tulcoturo/clovercut/releases/download/v${pkgver}/Clovercut-${pkgver}-aarch64.AppImage")
    
      20sha256sums_x86_64=('bbd35f5f95919bef68794d9f928ba6d39c92f6b090ea356fa3d09460f15a4e98')
    
      21sha256sums_aarch64=('7cca6d1cd3c7f7dbee973d9ec40b1e9ea2ccb23a90b0dbc3ed370d84898578e7')
    
      22
    
      23package() {
    
      24  local appimage
    
      25  if [ "$CARCH" = "aarch64" ]; then
    
      26    appimage="Clovercut-${pkgver}-aarch64.AppImage"
    
      27  else
    
      28    appimage="Clovercut-${pkgver}-x86_64.AppImage"
    
      29  fi
    
      30
    
      31  install -Dm755 "$appimage" "$pkgdir/opt/clovercut/Clovercut.AppImage"
    
      32
    
      33  # Launcher on the PATH. The AppImage carries its own libraries; the
    
      34  # wrapper only forwards arguments.
    
      35  install -d "$pkgdir/usr/bin"
    
      36  printf '#!/bin/sh\nexec /opt/clovercut/Clovercut.AppImage "$@"\n' > "$pkgdir/usr/bin/clovercut"
    
      37  chmod 755 "$pkgdir/usr/bin/clovercut"
    
      38
    
      39  # Desktop entry and icon, extracted from the AppImage itself so they
    
      40  # always match the shipped release. Falls back to a static entry if
    
      41  # extraction ever fails on the build host.
    
      42  if ./"$appimage" --appimage-extract >/dev/null 2>&1; then
    
      43    local desktop
    
      44    desktop=$(find squashfs-root -maxdepth 1 -name '*.desktop' | head -1)
    
      45    if [ -n "$desktop" ]; then
    
      46      install -Dm644 "$desktop" "$pkgdir/usr/share/applications/io.github.tulcoturo.clovercut.desktop"
    
      47    fi
    
      48    local icon
    
      49    icon=$(find squashfs-root -maxdepth 3 \( -name 'clovercut.png' -o -name '.DirIcon' \) | head -1)
    
      50    if [ -n "$icon" ]; then
    
      51      install -Dm644 "$icon" "$pkgdir/usr/share/icons/hicolor/256x256/apps/clovercut.png"
    
      52    fi
    
      53    rm -rf squashfs-root
    
      54  fi
    
      55  if [ ! -f "$pkgdir/usr/share/applications/io.github.tulcoturo.clovercut.desktop" ]; then
    
      56    install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/io.github.tulcoturo.clovercut.desktop" <<'DESKTOP'
    
      57[Desktop Entry]
    
      58Type=Application
    
      59Name=Clovercut
    
      60Comment=Edit video and audio locally
    
      61Exec=clovercut
    
      62Icon=clovercut
    
      63Categories=AudioVideo;Video;
    
      64Terminal=false
    
      65StartupWMClass=io.github.tulcoturo.clovercut
    
      66DESKTOP
    
      67  fi
    
      68}
    
      69

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 17:48:24	Low	2