doop-bin

LOW

maintainer czyt 0 votes scanned 2026-11-04 16:07:14.930874

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary nature of the source and recent upload with few votes, but it comes from a trusted project repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary nature of the source and recent upload with few votes, but it comes from a trusted project repository.

PKGBUILD

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2
    
      3pkgname=doop-bin
    
      4pkgver=0.11.0
    
      5pkgrel=1
    
      6pkgdesc="Open-source multiplayer design canvas where humans and AI agents design together (desktop shell)"
    
      7arch=('x86_64')
    
      8url="https://github.com/kgoedecke/doop"
    
      9license=('AGPL-3.0-only')
    
      10depends=('gtk3' 'webkit2gtk-4.1')
    
      11provides=('doop')
    
      12conflicts=('doop')
    
      13options=('!strip' '!debug')
    
      14
    
      15_deb="doop_${pkgver}_amd64.deb"
    
      16source_x86_64=(
    
      17  "${_deb}::${url}/releases/download/desktop-v${pkgver}/${_deb}"
    
      18  "LICENSE::${url}/raw/desktop-v${pkgver}/LICENSE"
    
      19)
    
      20sha256sums_x86_64=('873fed472e6435970d2c6f1b3e7ffef5a81babd07e7263bb83363fb03bef9c4f'
    
      21                   '0d96a4ff68ad6d4b6f1f30f713b18d5184912ba8dd389f86aa7710db079abcb0')
    
      22noextract=("${_deb}")
    
      23
    
      24package() {
    
      25  local data_archive
    
      26  data_archive=$(bsdtar -tf "${srcdir}/${_deb}" | awk '/^data\.tar(\.|$)/ { print; exit }')
    
      27  [[ -n "$data_archive" ]] || return 1
    
      28  bsdtar -xOf "${srcdir}/${_deb}" "$data_archive" |
    
      29    bsdtar --no-same-owner -xf - -C "${pkgdir}" || return 1
    
      30
    
      31  install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      32
    
      33  chmod -R u=rwX,go=rX "${pkgdir}"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 16:07:14	Low	2