driftleaf-bin

LOW

maintainer aster1630 0 votes scanned 2026-10-25 19:43:04.801001

View on AUR

Why flagged

The package re-packages official release binaries from the project's own GitHub repository, which is a normal practice when building from source is infeasible; the binaries are verified via checksums, and no untrusted or swappable hosts are involved.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package re-packages official release binaries from the project's own GitHub repository, which is a normal practice when building from source is infeasible; the binaries are verified via checksums, and no untrusted or swappable hosts are involved.

PKGBUILD

      1# Maintainer: Aster1630 <support@aetherassembly.org>
    
      2
    
      3# Repackages the official release .deb rather than building from source: Driftleaf's
    
      4# build needs an authenticated GitHub Packages token for a private npm dependency,
    
      5# which a clean makepkg chroot has no way to provide.
    
      6pkgname=driftleaf-bin
    
      7pkgver=0.7.0
    
      8pkgrel=1
    
      9pkgdesc="A local-first encrypted notes, graph, and database app"
    
      10arch=('x86_64' 'aarch64')
    
      11url="https://github.com/AetherAssembly/Driftleaf"
    
      12license=('AGPL-3.0-or-later')
    
      13depends=('webkit2gtk-4.1' 'gtk3' 'libappindicator-gtk3' 'hicolor-icon-theme')
    
      14provides=('driftleaf')
    
      15conflicts=('driftleaf')
    
      16source_x86_64=("https://github.com/AetherAssembly/Driftleaf/releases/download/v${pkgver}/Driftleaf_${pkgver}_amd64.deb")
    
      17source_aarch64=("https://github.com/AetherAssembly/Driftleaf/releases/download/v${pkgver}/Driftleaf_${pkgver}_arm64.deb")
    
      18source=("LICENSE-${pkgver}::https://raw.githubusercontent.com/AetherAssembly/Driftleaf/v${pkgver}/LICENSE")
    
      19sha256sums=('8486a10c4393cee1c25392769ddd3b2d6c242d6ec7928e1414efff7dfb2f07ef')
    
      20sha256sums_x86_64=('108baad7adf3222702eef4ad77859c40a193eabc307e90d0cda7e1280925ec27')
    
      21sha256sums_aarch64=('613cb49f53e1c66aabc9e22ac8cc5388f21e0fee7cd949a9792c605bb5a52293')
    
      22
    
      23package() {
    
      24  bsdtar -xOf "${srcdir}"/Driftleaf_*.deb data.tar.gz | bsdtar -xf - -C "${pkgdir}"
    
      25  install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      26}
    
      27

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-25 19:43:04	Low	2