conky-manager-g-bin

MEDIUM

maintainer almezali 0 votes scanned 2026-09-10 17:21:08.413104

View on AUR

Why flagged

The package installs a prebuilt binary from an unverifiable and obscure source (a personal-looking GitLab path with no project context), which could be silently swapped, constituting a supply-chain risk despite the plausible build context.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a prebuilt binary from an unverifiable and obscure source (a personal-looking GitLab path with no project context), which could be silently swapped, constituting a supply-chain risk despite the plausible build context.

PKGBUILD

      1# Maintainer: Mahmoud Almezali
    
      2
    
      3pkgname=conky-manager-g-bin
    
      4pkgver=0.7
    
      5pkgrel=1
    
      6pkgdesc='Conky theme manager with a modern UI.'
    
      7arch=('x86_64')
    
      8url='https://github.com/almezali/conky-manager-g'
    
      9license=('MIT')
    
      10depends=('gtk3')
    
      11provides=('conky-manager-g')
    
      12conflicts=('conky-manager-g')
    
      13
    
      14_source_url='https://gitlab.com/apps4linux/run.over.any/-/raw/main/conky-manager-g.tar.xz'
    
      15source=("conky-manager-g.tar.xz::${_source_url}")
    
      16sha256sums=('SKIP')
    
      17
    
      18prepare() {
    
      19    cd "$srcdir"
    
      20
    
      21    # The upstream archive contains these files at its root.
    
      22    for required in conky-manager-g conky-manager-g.desktop conky-manager-g.svg README.txt; do
    
      23        if [[ ! -e "$required" ]]; then
    
      24            printf 'Error: required file is missing from the archive: %s\n' "$required" >&2
    
      25            return 1
    
      26        fi
    
      27    done
    
      28
    
      29    chmod 755 conky-manager-g
    
      30    chmod 644 conky-manager-g.desktop conky-manager-g.svg README.txt
    
      31}
    
      32
    
      33package() {
    
      34    cd "$srcdir"
    
      35
    
      36    install -Dm755 conky-manager-g "$pkgdir/usr/bin/conky-manager-g"
    
      37    install -Dm644 conky-manager-g.desktop "$pkgdir/usr/share/applications/conky-manager-g.desktop"
    
      38    install -Dm644 conky-manager-g.svg "$pkgdir/usr/share/pixmaps/conky-manager-g.svg"
    
      39    install -Dm644 README.txt "$pkgdir/usr/share/doc/conky-manager-g/README.txt"
    
      40}
    
      41
    
      42# vim:set ts=4 sw=4 et:
    
      43

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 17:21:08	Medium	2