concentre-bin

LOW

maintainer vjousse 0 votes scanned 2026-10-29 13:52:19.945196

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; the low severity is due to the binary nature of the source and unverifiable build, but it comes from a legitimate project host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs a prebuilt binary from the project's official GitHub release, which is a normal AUR practice; the low severity is due to the binary nature of the source and unverifiable build, but it comes from a legitimate project host.

PKGBUILD

      1# Maintainer: Vincent Jousse <vincent@jousse.org> - https://vincent.jousse.org
    
      2pkgname=concentre-bin
    
      3pkgver=0.10.0
    
      4pkgrel=1
    
      5pkgdesc="Focus timer with a visual countdown and tray icon (formerly Pomodorolm)"
    
      6arch=('x86_64')
    
      7url="https://github.com/vjousse/concentre"
    
      8license=('AGPL-3.0-only')
    
      9depends=('alsa-lib' 'gtk3' 'hicolor-icon-theme' 'glibc' 'webkit2gtk-4.1' 'libsoup' 'cairo' 'glib2' 'pango' 'gcc-libs' 'gdk-pixbuf2' 'libayatana-appindicator')
    
      10# The package still installs the `pomodorolm` binary (Tauri productName)
    
      11provides=('concentre' 'pomodorolm')
    
      12conflicts=('pomodorolm' 'pomodorolm-bin')
    
      13replaces=('pomodorolm-bin')
    
      14source=("https://github.com/vjousse/concentre/releases/download/app-v$pkgver/pomodorolm_${pkgver}_amd64.deb")
    
      15sha256sums=('aadb6c0d3c57e6e3368deea18cca52efb4caf76b9625dd691bc7296d0919b1ba')
    
      16
    
      17package() {
    
      18  bsdtar -xf "$srcdir/data.tar.gz" -C "$pkgdir"
    
      19
    
      20  # The binary is still named `pomodorolm`
    
      21  # also make it available as `concentre`
    
      22  ln -s pomodorolm "$pkgdir/usr/bin/concentre"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-29 13:52:19	Low	2