codepilot-bin

maintainer duanluan · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; the source is verifiable and checksummed, posing no immediate risk beyond standard prebuilt binary trust.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; the source is verifiable and checksummed, posing no immediate risk beyond standard prebuilt binary trust.

PKGBUILD

1# Maintainer: duanluan <duanluan@outlook.com>
2
3pkgname=codepilot-bin
4_pkgname=codepilot
5_appname=CodePilot
6pkgver=0.67.1
7pkgrel=1
8pkgdesc='Multi-model AI agent desktop client (prebuilt binary)'
9arch=('x86_64' 'aarch64')
10url='https://github.com/op7418/CodePilot'
11license=('BUSL-1.1')
12depends=(
13 'alsa-lib'
14 'at-spi2-core'
15 'cairo'
16 'dbus'
17 'expat'
18 'glib2'
19 'glibc'
20 'gtk3'
21 'hicolor-icon-theme'
22 'libcups'
23 'libgcc'
24 'libnotify'
25 'libsecret'
26 'libstdc++'
27 'libx11'
28 'libxcb'
29 'libxcomposite'
30 'libxdamage'
31 'libxext'
32 'libxfixes'
33 'libxkbcommon'
34 'libxrandr'
35 'libxss'
36 'libxtst'
37 'mesa'
38 'nspr'
39 'nss'
40 'pango'
41 'systemd-libs'
42 'util-linux-libs'
43 'xdg-utils'
44)
45optdepends=('org.freedesktop.secrets: secret storage backend')
46provides=("${_pkgname}=${pkgver}")
47conflicts=("${_pkgname}" 'codepilot-appimage')
48options=('!strip')
49source=("LICENSE-${pkgver}::https://raw.githubusercontent.com/op7418/CodePilot/v${pkgver}/LICENSE")
50source_x86_64=("${_appname}-${pkgver}-amd64.deb::https://github.com/op7418/CodePilot/releases/download/v${pkgver}/${_appname}-${pkgver}-amd64.deb")
51source_aarch64=("${_appname}-${pkgver}-arm64.deb::https://github.com/op7418/CodePilot/releases/download/v${pkgver}/${_appname}-${pkgver}-arm64.deb")
52noextract=("${_appname}-${pkgver}-amd64.deb" "${_appname}-${pkgver}-arm64.deb")
53sha256sums=('e77188ca224977d67c57d8c9cfe595b2bfb4146423cb2c016f8502dd15f8b6cf')
54sha256sums_x86_64=('3693360b71ed00355f9c5d5e190aef1998a67c4de3f2baddee56e797cd7b6d51')
55sha256sums_aarch64=('efe51c28f5c8416cfdb8efacf11241d82985deb9f52c36587c3ddd7cfe01841c')
56
57package() {
58 local deb_arch
59 local extract_dir="${srcdir}/deb-extract-${CARCH}"
60 local data_archives
61
62 case "${CARCH}" in
63 x86_64) deb_arch='amd64' ;;
64 aarch64) deb_arch='arm64' ;;
65 *)
66 printf 'unsupported architecture: %s\n' "${CARCH}" >&2
67 return 1
68 ;;
69 esac
70
71 rm -rf "${extract_dir}"
72 install -dm755 "${extract_dir}"
73 bsdtar -C "${extract_dir}" -xf \
74 "${srcdir}/${_appname}-${pkgver}-${deb_arch}.deb"
75
76 data_archives=("${extract_dir}"/data.tar.*)
77 if (( ${#data_archives[@]} != 1 )) || [[ ! -f "${data_archives[0]}" ]]; then
78 printf 'unable to locate the Debian data archive\n' >&2
79 return 1
80 fi
81 bsdtar -C "${pkgdir}" -xf "${data_archives[0]}"
82
83 install -dm755 "${pkgdir}/usr/bin"
84 ln -s "/opt/${_appname}/${_pkgname}" \
85 "${pkgdir}/usr/bin/${_pkgname}"
86
87 chmod 0755 "${pkgdir}/opt/${_appname}/chrome-sandbox"
88 install -Dm644 "${srcdir}/LICENSE-${pkgver}" \
89 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
90}
91

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 01:34:23 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion