dlssnr-bin

MEDIUM
maintainer Wunder_Wungiel 0 votes scanned 2026-09-12 21:12:39.538168
View on AUR
Why flagged

The package installs a prebuilt Debian .deb from a GitHub release without source availability, creating an unverifiable supply-chain risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs a prebuilt Debian .deb from a GitHub release without source availability, creating an unverifiable supply-chain risk.

PKGBUILD

1# Maintainer: Wunder_Wungiel
2
3pkgname=dlssnr-bin
4_pkgname=dlssnr
5pkgver=0.3.0
6pkgrel=1
7pkgdesc='DLSS5 Neural Rendering Vulkan layer and helper.'
8url="https://github.com/bmitch87/DLSS5VKLayer"
9arch=('x86_64')
10license=('AGPL-3.0-only')
11depends=('bash' 'vulkan-icd-loader' 'qt6-base' 'pciutils')
12conflicts=("${_pkgname}")
13provides=("${_pkgname}")
14options=('!debug')
15source_x86_64=("${url}/releases/download/${pkgver}-${pkgrel}/dlssnr_${pkgver}-${pkgrel}_debian13_amd64.deb")
16sha256sums_x86_64=('9c6992cac74f8f924dfa9ad93962ce3dbbd7f50fbc0f4c5850454a94f67107f0')
17
18
19prepare() {
20 bsdtar -xf data.tar.xz
21}
22
23package() {
24 if [ -d "${srcdir}/usr" ]; then
25 cp -dr --no-preserve=ownership "${srcdir}/usr" "${pkgdir}/"
26 fi
27
28 if [ -d "${pkgdir}/usr/lib64" ]; then
29 install -dm755 "${pkgdir}/usr/lib"
30 cp -dr --no-preserve=ownership "${pkgdir}/usr/lib64/." "${pkgdir}/usr/lib/"
31 rm -rf "${pkgdir}/usr/lib64"
32 fi
33}
34

Scan history

Scanned at (UTC)SeverityRules
2026-09-12 21:12:39 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion