conflux-gtk-git

LOW

maintainer SelfRef 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Why flagged

Package builds from a legitimate project Git repository, has no remote code execution or unverifiable binaries, and the flagged low-vote/recent-upload is a mild risk due to limited community review, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a legitimate project Git repository, has no remote code execution or unverifiable binaries, and the flagged low-vote/recent-upload is a mild risk due to limited community review, not malicious content.

PKGBUILD

      1# Maintainer: SelfRef <arch@selfref.dev>
    
      2
    
      3_pkgbase=conflux
    
      4pkgname="$_pkgbase-gtk-git"
    
      5pkgver=1.1.0.r41.g79d4347
    
      6pkgrel=1
    
      7pkgdesc='GNOME app to set up and watch conflux syncs'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/AperteDev/conflux'
    
      10license=('GPL-3.0-or-later')
    
      11depends=('conflux' 'gcc-libs' 'glib2' 'glibc' 'gtk4' 'libadwaita>=1:1.7' 'openssl' 'polkit' 'zlib')
    
      12makedepends=('blueprint-compiler' 'cargo' 'git')
    
      13optdepends=("libsecret: keep the remotes' passwords in the keyring")
    
      14provides=("$_pkgbase-gtk")
    
      15conflicts=("$_pkgbase-gtk")
    
      16options=('!lto')
    
      17source=("$_pkgbase::git+$url.git")
    
      18sha256sums=('SKIP')
    
      19
    
      20pkgver() {
    
      21	cd "$_pkgbase"
    
      22	git describe --long --tags --abbrev=7 | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      23}
    
      24
    
      25prepare() {
    
      26	cd "$_pkgbase"
    
      27	export RUSTUP_TOOLCHAIN=stable
    
      28	cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      29}
    
      30
    
      31build() {
    
      32	cd "$_pkgbase"
    
      33	export RUSTUP_TOOLCHAIN=stable
    
      34	export CARGO_TARGET_DIR=target
    
      35	# Builds the app knowing where its helper is installed.
    
      36	make build-gtk
    
      37}
    
      38
    
      39check() {
    
      40	cd "$_pkgbase"
    
      41	export RUSTUP_TOOLCHAIN=stable
    
      42	cargo test --frozen -p conflux-gtk -p conflux-helper
    
      43}
    
      44
    
      45package() {
    
      46	cd "$_pkgbase"
    
      47	make install-gtk DESTDIR="$pkgdir"
    
      48	mv "$pkgdir/usr/share/licenses/$_pkgbase-gtk" "$pkgdir/usr/share/licenses/$pkgname"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Low	2
2026-11-02 00:02:06	Low	2