cosmic-tasks

LOW

maintainer smiley 0 votes scanned 2026-10-20 13:28:00.015066

View on AUR

Why flagged

Package builds from a legitimate project Git repository, has no remote code execution or data exfiltration, but uses 'SKIP' checksum and has few votes, indicating lower trustworthiness but not immediate danger.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a legitimate project Git repository, has no remote code execution or data exfiltration, but uses 'SKIP' checksum and has few votes, indicating lower trustworthiness but not immediate danger.

PKGBUILD

      1# Maintainer: AuthenticSm1les <khidarlaminehamdi@gmail.com>
    
      2pkgname=cosmic-tasks
    
      3_pkgname=tasks
    
      4_app_id=dev.edfloreshz.Tasks
    
      5pkgver=0.3.1
    
      6pkgrel=1
    
      7pkgdesc="A simple task management application for the COSMIC desktop"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://github.com/cosmic-utils/tasks"
    
      10license=('GPL-3.0')
    
      11depends=(
    
      12  'alsa-lib'
    
      13  'at-spi2-core'
    
      14  'cairo'
    
      15  'dbus'
    
      16  'expat'
    
      17  'hicolor-icon-theme'
    
      18  'libcups'
    
      19  'libx11'
    
      20  'libxcb'
    
      21  'libxcomposite'
    
      22  'libxdamage'
    
      23  'libxext'
    
      24  'libxfixes'
    
      25  'libxkbcommon'
    
      26  'libxrandr'
    
      27  'libcosmic-git'
    
      28  'mesa'
    
      29  'nspr'
    
      30  'nss'
    
      31  'pango'
    
      32  'systemd-libs'
    
      33)
    
      34makedepends=(
    
      35  'cargo'
    
      36  'git'
    
      37)
    
      38checkdepends=(
    
      39  'appstream'
    
      40  'desktop-file-utils'
    
      41)
    
      42source=("git+https://github.com/cosmic-utils/tasks.git#tag=$pkgver")
    
      43sha256sums=('SKIP')
    
      44
    
      45prepare() {
    
      46  cd "$_pkgname"
    
      47  export RUSTUP_TOOLCHAIN=stable
    
      48  cargo fetch --target "$(rustc --print host-tuple)"
    
      49}
    
      50
    
      51build() {
    
      52  cd "$_pkgname"
    
      53  export RUSTUP_TOOLCHAIN=stable
    
      54  cargo build --release
    
      55}
    
      56
    
      57check() {
    
      58  cd "$_pkgname"
    
      59  appstreamcli validate --no-net "res/${_app_id}.metainfo.xml"
    
      60  desktop-file-validate "res/${_app_id}.desktop"
    
      61}
    
      62
    
      63package() {
    
      64  cd "$_pkgname"
    
      65  install -Dm0755 "target/release/$_pkgname" "$pkgdir/usr/bin/$_pkgname"
    
      66  install -Dm0644 "res/${_app_id}.desktop" "$pkgdir/usr/share/applications/${_app_id}.desktop"
    
      67  install -Dm0644 "res/${_app_id}.metainfo.xml" "$pkgdir/usr/share/metainfo/${_app_id}.metainfo.xml"
    
      68  install -Dm0644 "res/icons/hicolor/scalable/apps/${_app_id}.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/${_app_id}.svg"
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 13:28:00	Low	2