cosmic-applet-colortemp-git

maintainer xjjo · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a public Git repository owned by the maintainer, which is normal for AUR-git packages; the only risk is low due to few votes and recent upload, but the source is transparent and no untrusted binaries are downloaded.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository owned by the maintainer, which is normal for AUR-git packages; the only risk is low due to few votes and recent upload, but the source is transparent and no untrusted binaries are downloaded.

PKGBUILD

      1# Maintainer: JuanJo Ciarlante <jjo@users.noreply.github.com>
    
      2#
    
      3# VCS PKGBUILD for the COSMIC panel applet. Tracks `main`.
    
      4pkgname=cosmic-applet-colortemp-git
    
      5_pkgname=drm-colortemp
    
      6_appletname=cosmic-applet-colortemp
    
      7pkgver=2.0.1.r0.g0000000
    
      8pkgrel=1
    
      9pkgdesc="COSMIC panel applet for drm-colortemp: one-click screen color temperature (git)"
    
      10arch=('x86_64')
    
      11url="https://github.com/jjo/drm-colortemp"
    
      12license=('Apache-2.0')
    
      13# kbd provides chvt/fgconsole, used by the root helper; sudo authorizes it.
    
      14# libcosmic/winit dlopen() libwayland-client and libxkbcommon; the applet renders
    
      15# with tiny-skia/softbuffer (software), so no Vulkan or GL runtime is needed.
    
      16depends=('drm-colortemp' 'gcc-libs' 'libxkbcommon' 'wayland' 'sudo' 'kbd'
    
      17         'ttf-font' 'hicolor-icon-theme')
    
      18# winit's X11 backend is also dlopen()ed; unused under COSMIC (Wayland).
    
      19optdepends=('libx11: X11 backend fallback'
    
      20            'libxcb: X11 backend fallback'
    
      21            'libxi: X11 backend fallback')
    
      22makedepends=('rust' 'cargo' 'git')
    
      23provides=("$_appletname=$pkgver")
    
      24conflicts=("$_appletname")
    
      25backup=('etc/sudoers.d/drm-colortemp-applet')
    
      26source=("$_pkgname::git+https://github.com/jjo/drm-colortemp.git")
    
      27sha256sums=('SKIP')
    
      28
    
      29pkgver() {
    
      30  cd "$_pkgname"
    
      31  git describe --long --tags --abbrev=7 2>/dev/null \
    
      32    | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' \
    
      33    || printf "0.0.0.r%s.g%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      34}
    
      35
    
      36prepare() {
    
      37  cd "$_pkgname/applet"
    
      38  export CARGO_HOME="$srcdir/.cargo"
    
      39  # libcosmic is a pinned git dependency; cargo fetch resolves it here so the
    
      40  # build itself can run --frozen.
    
      41  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      42}
    
      43
    
      44build() {
    
      45  cd "$_pkgname/applet"
    
      46  export CARGO_HOME="$srcdir/.cargo"
    
      47  export RUSTUP_TOOLCHAIN=stable
    
      48  export CARGO_TARGET_DIR=target
    
      49  cargo build --frozen --release
    
      50}
    
      51
    
      52package() {
    
      53  cd "$_pkgname/applet"
    
      54
    
      55  install -Dm755 target/release/cosmic-applet-colortemp \
    
      56    "$pkgdir/usr/bin/cosmic-applet-colortemp"
    
      57
    
      58  # Root helper performing the chvt dance; the only privileged component.
    
      59  install -Dm755 helper/drm-colortemp-apply "$pkgdir/usr/bin/drm-colortemp-apply"
    
      60
    
      61  install -Dm644 data/io.github.jjo.CosmicAppletColortemp.desktop \
    
      62    "$pkgdir/usr/share/applications/io.github.jjo.CosmicAppletColortemp.desktop"
    
      63  install -Dm644 data/icons/io.github.jjo.CosmicAppletColortemp-symbolic.svg \
    
      64    "$pkgdir/usr/share/icons/hicolor/scalable/apps/io.github.jjo.CosmicAppletColortemp-symbolic.svg"
    
      65
    
      66  install -Dm644 README.md "$pkgdir/usr/share/doc/$_appletname/README.md"
    
      67  install -Dm644 ../LICENSE "$pkgdir/usr/share/licenses/$_appletname/LICENSE"
    
      68
    
      69  # Upstream sources default to the source-install prefix.
    
      70  sed -i 's|/usr/local/bin|/usr/bin|g' \
    
      71    "$pkgdir/usr/share/applications/io.github.jjo.CosmicAppletColortemp.desktop"
    
      72
    
      73  # A package cannot know which user runs the panel, so grant the three exact
    
      74  # helper commands to the wheel group instead of a username.
    
      75  install -d "$pkgdir/etc/sudoers.d"
    
      76  sed -e 's|@PRINCIPAL@|%wheel|g' -e 's|@BINDIR@|/usr/bin|g' \
    
      77    data/drm-colortemp-applet.sudoers.in \
    
      78    > "$pkgdir/etc/sudoers.d/drm-colortemp-applet"
    
      79  chmod 0440 "$pkgdir/etc/sudoers.d/drm-colortemp-applet"
    
      80  visudo -cf "$pkgdir/etc/sudoers.d/drm-colortemp-applet" >/dev/null
    
      81}
    
      82

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 19:35:21	LOW	2