conflux-gtk-bin

LOW

maintainer SelfRef 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

The package installs a prebuilt binary from a project-owned GitHub release, which is a normal AUR practice; the low severity is due to limited project visibility and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package installs a prebuilt binary from a project-owned GitHub release, which is a normal AUR practice; the low severity is due to limited project visibility and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=conflux-gtk
    
      4pkgname="$_pkgbase-bin"
    
      5pkgver=2.0.0
    
      6pkgrel=1
    
      7pkgdesc='GNOME app to set up and watch conflux syncs'
    
      8arch=('x86_64')
    
      9url='https://github.com/AperteDev/conflux'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('conflux' 'gcc-libs' 'glib2' 'glibc' 'gtk4' 'libadwaita>=1:1.7' 'openssl' 'polkit' 'zlib')
    
      12optdepends=("libsecret: keep the remotes' passwords in the keyring")
    
      13provides=("$_pkgbase")
    
      14conflicts=("$_pkgbase")
    
      15# The release's tarball of the app: its files, to unpack into /.
    
      16source=("$_pkgbase-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/$_pkgbase-$pkgver-x86_64.tar.gz")
    
      17noextract=("$_pkgbase-$pkgver-x86_64.tar.gz")
    
      18sha256sums=('1ee3980d56882c11e13e48c7fa8ab88d2189ff8a2bdafc7fdab7cc8293c04eeb')
    
      19
    
      20package() {
    
      21	bsdtar -xpf "$_pkgbase-$pkgver-x86_64.tar.gz" -C "$pkgdir"
    
      22	mv "$pkgdir/usr/share/licenses/$_pkgbase" "$pkgdir/usr/share/licenses/$pkgname"
    
      23}
    
      24

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	2
2026-11-02 00:02:06	Low	2