comtool-bin

LOW

maintainer neko_ayaya 0 votes scanned 2026-09-17 03:24:22.735270

View on AUR

Why flagged

The package installs a prebuilt PyInstaller bundle from the project's official GitHub releases, which is normal for -bin packages; the only risk is reliance on an unreviewed binary, but it comes from the legitimate upstream source.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt PyInstaller bundle from the project's official GitHub releases, which is normal for -bin packages; the only risk is reliance on an unreviewed binary, but it comes from the legitimate upstream source.

PKGBUILD

      1# Maintainer: a15355447898a <a15355447898a@outlook.com>
    
      2
    
      3# The plain "comtool" name belongs to [extra] (the python package), so this
    
      4# prebuilt-bundle variant uses the usual -bin suffix. _upstream is the name the
    
      5# project itself uses: it is baked into the release tarball and into the
    
      6# launcher inside the PyInstaller bundle, so those two keep it.
    
      7pkgname=comtool-bin
    
      8_upstream=comtool
    
      9pkgver=3.4.1
    
      10pkgrel=1
    
      11pkgdesc="A cross platform serial debug tool written by python (upstream prebuilt bundle)"
    
      12arch=('x86_64')
    
      13url="https://github.com/Neutree/COMTool"
    
      14license=('LGPL-3.0-or-later')
    
      15depends=('glibc'
    
      16    'zlib'
    
      17    'libxcb'
    
      18    'libglvnd'
    
      19    'libdrm'
    
      20    'fontconfig'
    
      21    'freetype2')
    
      22makedepends=()
    
      23checkdepends=()
    
      24optdepends=()
    
      25provides=('COMTool')
    
      26conflicts=('COMTool' 'python-comtool')
    
      27options=('!debug')
    
      28install="${pkgname}.install"
    
      29source=("${_upstream}_ubuntu_v${pkgver}.tar.xz::${url}/releases/download/v${pkgver}/${_upstream}_ubuntu_v${pkgver}.tar.xz"
    
      30    "${pkgname}.install")
    
      31sha256sums=('1f92aa43fac2f28f5a873d00864c031eb7ec158a950de92378a981f1e64df782'
    
      32    'adf8b608536716fc01d7644c016b41dd45060c564e9911bff0d2d522ea5629cb')
    
      33
    
      34package() {
    
      35    # Upstream ships a self-contained PyInstaller onedir bundle (launcher +
    
      36    # _internal/) that has to stay in one directory, so it lives under /opt.
    
      37    install -d "${pkgdir}/opt/${pkgname}"
    
      38    cp -a "${srcdir}/${_upstream}/." "${pkgdir}/opt/${pkgname}/"
    
      39
    
      40    # The bundled Ubuntu fontconfig/freetype predate the syntax used by Arch's
    
      41    # fontconfig configuration and print parse errors on every start. The
    
      42    # system libraries are ABI-compatible with the bundled Qt, so use those.
    
      43    rm -f "${pkgdir}/opt/${pkgname}/_internal/libfontconfig.so.1" \
    
      44        "${pkgdir}/opt/${pkgname}/_internal/libfreetype.so.6"
    
      45
    
      46    install -Dm0644 "${pkgdir}/opt/${pkgname}/_internal/assets/logo.png" \
    
      47        "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
    
      48
    
      49    install -d "${pkgdir}/usr/share/applications"
    
      50    cat > "${pkgdir}/usr/share/applications/io.github.neutree.${pkgname}.desktop" <<EOF
    
      51[Desktop Entry]
    
      52Version=1.0
    
      53Type=Application
    
      54Name=COMTool
    
      55Comment=Cross platform serial debug tool
    
      56Exec=/opt/${pkgname}/${_upstream} %U
    
      57Icon=${pkgname}
    
      58Categories=Development;Utility;
    
      59Terminal=false
    
      60StartupNotify=true
    
      61EOF
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 03:24:22	Low	2