codeburn-desktop-bin

LOW

maintainer anjanaya 0 votes scanned 2026-08-24 11:22:50.619045

View on AUR

Why flagged

The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for binary packages; the only risk is trusting the vendor's release integrity, but the source is verifiable and checksums are provided.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt Electron app from the project's official GitHub releases, which is normal for binary packages; the only risk is trusting the vendor's release integrity, but the source is verifiable and checksums are provided.

PKGBUILD

      1# Maintainer: Guru <anjanaya@gmail.com>
    
      2pkgname=codeburn-desktop-bin
    
      3pkgver=0.9.20
    
      4pkgrel=1
    
      5pkgdesc="CodeBurn Desktop — Electron app fed by the codeburn CLI, for AI coding token/cost observability"
    
      6arch=('x86_64')
    
      7url="https://github.com/getagentseal/codeburn"
    
      8license=('MIT')
    
      9depends=('gtk3' 'nss' 'libxss' 'libxtst' 'libnotify' 'at-spi2-core' 'util-linux-libs' 'libsecret' 'xdg-utils' 'hicolor-icon-theme')
    
      10# The desktop bundles its own codeburn CLI; the standalone `codeburn` (AUR)
    
      11# package is an optional companion for terminal/token-dashboard use.
    
      12optdepends=('libappindicator-gtk3: system tray indicator'
    
      13            'codeburn: standalone CLI for terminal token/cost dashboard')
    
      14provides=('codeburn-desktop')
    
      15conflicts=('codeburn-desktop')
    
      16options=('!strip')
    
      17source=("codeburn-desktop-${pkgver}.deb::https://github.com/getagentseal/codeburn/releases/download/desktop-v${pkgver}/codeburn-desktop_${pkgver}_amd64.deb"
    
      18        "LICENSE-${pkgver}::https://raw.githubusercontent.com/getagentseal/codeburn/desktop-v${pkgver}/LICENSE")
    
      19sha256sums=('bf875a11aef90853bee3891ece965b98a7ddcc5331d98dfd113b72c80e8598ca'
    
      20            '25dd3389bfc55f463f9745c6fa3f4193bb31b58157a6861836b62bf91f6b76e5')
    
      21
    
      22package() {
    
      23    cd "${srcdir}"
    
      24    bsdtar -xf data.tar.xz -C "${pkgdir}"
    
      25
    
      26    # /usr/bin/codeburn belongs to the codeburn CLI package (AUR: codeburn);
    
      27    # expose the desktop binary under a distinct name to avoid the clash.
    
      28    install -dm755 "${pkgdir}/usr/bin"
    
      29    ln -sf /opt/CodeBurn/codeburn "${pkgdir}/usr/bin/codeburn-desktop"
    
      30
    
      31    # Deb ships Electron's own licenses in /opt/CodeBurn; add codeburn's MIT license.
    
      32    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      33
    
      34    # npm/deb ownership is wonky; normalize.
    
      35    chown -R root:root "${pkgdir}"
    
      36    find "${pkgdir}" -type d -exec chmod 755 {} +
    
      37}
    
      38

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-24 11:22:50	Low	2