cordiale-bin

CLEAN

maintainer vash909 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for -bin packages, and all sources are verified with matching checksums.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: vash909 <iu1bot@xzgroup.net>
    
      2
    
      3pkgname=cordiale-bin
    
      4pkgver=1.0.4.41204204168
    
      5pkgrel=1
    
      6# Upstream appends the GitHub Actions run ID to its binary package version.
    
      7_upstream_tag=v1.0.4
    
      8_asset=Cordiale_Arch_rolling_x86_64.pkg.tar.zst
    
      9pkgdesc='Native desktop client for Grappa chat, built with Rust and Slint (official binary)'
    
      10arch=('x86_64')
    
      11url='https://github.com/Sythos/Cordiale'
    
      12license=('MIT')
    
      13# The window-system libraries are loaded dynamically by the Slint backend.
    
      14depends=('alsa-lib' 'fontconfig' 'glibc' 'hicolor-icon-theme' 'libgcc'
    
      15         'libglvnd' 'libx11' 'libxcb' 'libxcursor' 'libxi'
    
      16         'libxkbcommon' 'libxkbcommon-x11' 'wayland')
    
      17optdepends=('org.freedesktop.secrets: store credentials in a desktop keyring'
    
      18            'xdg-desktop-portal: native file dialogs with a suitable desktop backend'
    
      19            'xdg-utils: open links in the default browser'
    
      20            'grappa-bin: run a local Grappa server')
    
      21provides=("cordiale=${pkgver}")
    
      22conflicts=('cordiale')
    
      23options=('!strip' '!debug')
    
      24source=("${pkgname}-${_upstream_tag}-${_asset}::${url}/releases/download/${_upstream_tag}/${_asset}"
    
      25        "cordiale-${_upstream_tag}.LICENSE::https://raw.githubusercontent.com/Sythos/Cordiale/${_upstream_tag}/LICENSE"
    
      26        'README.md')
    
      27noextract=("${pkgname}-${_upstream_tag}-${_asset}")
    
      28sha256sums=('af782c2d8438651ee4fd82d852a75aa5b3dc1bc360dc150ec754c45cf26e6b85'
    
      29            'd05b3be1027c3d7b3a14380f5fb8db091efb8ba40d3628d95e2178e0942915c7'
    
      30            'f0ad2c89a6ee3cba5f4d12b02b6b1b8a5ea221e5f57730bfaae8bc1d88f46149')
    
      31
    
      32package() {
    
      33    # Install reviewed payload paths, excluding upstream package metadata.
    
      34    bsdtar --no-same-owner -xf "${srcdir}/${pkgname}-${_upstream_tag}-${_asset}" \
    
      35        -C "${pkgdir}" usr
    
      36    install -Dm644 "${srcdir}/cordiale-${_upstream_tag}.LICENSE" \
    
      37        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      38    install -Dm644 "${srcdir}/README.md" \
    
      39        "${pkgdir}/usr/share/doc/cordiale/README.md"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Clean	2
2026-11-01 22:01:45	Low	1