dev-janitor-git

maintainer nathaliesandoz · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged Package builds from source via git, uses standard dependencies and tools, and installs only locally compiled binaries and static assets; the orphaned/re-adopted status is administrative and does not imply code risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): Package builds from source via git, uses standard dependencies and tools, and installs only locally compiled binaries and static assets; the orphaned/re-adopted status is administrative and does not imply code risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Aliom <aliom_@outlook.com>
    
      2pkgname=dev-janitor-git
    
      3_pkgname=dev-janitor
    
      4pkgver=r151.3f595f4
    
      5pkgrel=1
    
      6pkgdesc="Dev Janitor - A developer tool management app (Tauri/Rust Source Build)"
    
      7arch=('x86_64')
    
      8url="https://github.com/cocojojo5213/Dev-Janitor"
    
      9license=('MIT')
    
      10# 依赖列表保持不变
    
      11depends=('gtk3' 'webkit2gtk-4.1' 'openssl' 'libappindicator-gtk3')
    
      12makedepends=('git' 'pnpm' 'python' 'rust' 'cargo')
    
      13provides=("$_pkgname")
    
      14conflicts=("$_pkgname")
    
      15source=("git+${url}.git")
    
      16sha256sums=('SKIP')
    
      17
    
      18pkgver() {
    
      19    cd "Dev-Janitor"
    
      20    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      21}
    
      22
    
      23prepare() {
    
      24    cd "Dev-Janitor"
    
      25    # 如果 cargo 下载依赖慢，请取消下面注释并配置镜像
    
      26    # export RUSTUP_DIST_SERVER=https://rsproxy.cn
    
      27    # export RUSTUP_UPDATE_ROOT=https://rsproxy.cn/rustup
    
      28}
    
      29
    
      30build() {
    
      31    cd "Dev-Janitor"
    
      32    echo "正在安装前端依赖..."
    
      33    pnpm install
    
      34
    
      35    echo "正在编译 Rust 后端 + 前端..."
    
      36    # 关键修改 1：添加 --bundles none
    
      37    # 这告诉 Tauri：只编译二进制文件，不要尝试制作 deb/rpm/appimage
    
      38    # 这样就能避开那个 linuxdeploy 的报错
    
      39    pnpm tauri build --no-bundle
    
      40}
    
      41
    
      42package() {
    
      43    cd "Dev-Janitor"
    
      44
    
      45    # 关键修改 2：修正二进制文件名
    
      46    # 日志显示生成的文件名是 dev-janitor-v2
    
      47    # 我们把它安装到系统里重命名为 dev-janitor
    
      48    install -Dm755 "src-tauri/target/release/dev-janitor-v2" "$pkgdir/usr/bin/dev-janitor"
    
      49
    
      50    # 安装图标 (尝试寻找图标路径，如果没有就算了)
    
      51    # Tauri v2 图标路径通常在 src-tauri/icons/
    
      52    if [ -f "src-tauri/icons/128x128.png" ]; then
    
      53        install -Dm644 "src-tauri/icons/128x128.png" "$pkgdir/usr/share/pixmaps/dev-janitor.png"
    
      54    elif [ -f "src-tauri/icons/icon.png" ]; then
    
      55        install -Dm644 "src-tauri/icons/icon.png" "$pkgdir/usr/share/pixmaps/dev-janitor.png"
    
      56    fi
    
      57
    
      58    # 创建 Desktop 文件
    
      59    install -d "$pkgdir/usr/share/applications"
    
      60    cat > "$pkgdir/usr/share/applications/dev-janitor.desktop" <<EOF
    
      61[Desktop Entry]
    
      62Name=Dev Janitor
    
      63Exec=/usr/bin/dev-janitor
    
      64Icon=dev-janitor
    
      65Type=Application
    
      66Categories=Development;
    
      67Comment=Dev Janitor (Tauri Build)
    
      68EOF
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0