dory
maintainer twilight0
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from a source tarball hosted on the maintainer's GitHub repository, which is a normal AUR practice; the 'SKIP' checksum and recent maintainer change are quality concerns but do not indicate active malice or code execution risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a source tarball hosted on the maintainer's GitHub repository, which is a normal AUR practice; the 'SKIP' checksum and recent maintainer change are quality concerns but do not indicate active malice or code execution risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1
# Maintainer: Twilight0 <twilight0@vivaldi.net>
2
3
pkgname=dory
4
pkgver=6.7.6
5
pkgrel=1
6
pkgdesc="A standalone Nemo fork named Dory for file picking and portal integration"
7
arch=('x86_64')
8
url="https://github.com/Twilight0/dory"
9
license=('GPL3')
10
depends=(
11
cinnamon-desktop
12
libexif
13
exempi
14
xapp
15
gtk3
16
)
17
makedepends=(
18
meson
19
gobject-introspection
20
intltool
21
glib2-devel
22
libgsf
23
)
24
source=("$pkgname-$pkgver.tar.gz::https://github.com/Twilight0/dory/archive/refs/tags/v$pkgver.tar.gz")
25
sha256sums=('SKIP')
26
27
build() {
28
arch-meson "$pkgname-$pkgver" build \
29
-Ddeprecated_warnings=false \
30
-Dempty_view=false \
31
-Dexif=true \
32
-Dgtk_doc=false \
33
-Dgtk_layer_shell=false \
34
-Dselinux=false \
35
-Dtracker=false \
36
-Dxmp=true
37
meson compile -C build
38
}
39
40
package() {
41
meson install -C build --destdir "$pkgdir"
42
}
43
Changes since previous scan
--- PKGBUILD @ 2026-07-26 00:07+++ PKGBUILD @ 2026-08-03 00:08@@ -1,7 +1,7 @@ # Maintainer: Twilight0 <twilight0@vivaldi.net> pkgname=dory-pkgver=6.7.5+pkgver=6.7.6 pkgrel=1 pkgdesc="A standalone Nemo fork named Dory for file picking and portal integration" arch=('x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 09:32:02 | MEDIUM | 1 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 21:18:19 | MEDIUM | 1 |
| 2026-07-07 00:22:52 | CLEAN | 3 |
| 2026-07-06 11:20:54 | MEDIUM | 2 |
| 2026-07-06 00:10:58 | LOW | 2 |
| 2026-07-05 00:27:08 | LOW | 2 |
| 2026-07-04 00:27:25 | LOW | 2 |