dsh-tui-bin

LOW

maintainer calmcrow 1 votes scanned 2026-08-20 15:11:35.617252

View on AUR

Why flagged

The package installs a Node.js application from the official npm registry, which is a trusted source; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a Node.js application from the official npm registry, which is a trusted source; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: calmcrow <calmcrow@outlook.com>
    
      2# Adapted from deepseek-harness-bin by Byeonghoon Yoo <bhyoo@bhyoo.com> (https://aur.archlinux.org/packages/deepseek-harness-bin)
    
      3
    
      4pkgname=dsh-tui-bin
    
      5_npmver=0.8.6
    
      6pkgver=0.8.6
    
      7pkgrel=1
    
      8pkgdesc='Claude Code style fullscreen TUI launcher for DeepSeek Harness (dsh)'
    
      9arch=('x86_64')
    
      10url='https://github.com/ccch1mneyyy/dsh-TUI'
    
      11license=('MIT')
    
      12depends=('deepseek-harness' 'nodejs' 'pnpm')
    
      13makedepends=('npm')
    
      14options=('!strip')
    
      15provides=('dsh-tui')
    
      16source=("dsh-tui-${_npmver}.tgz::https://registry.npmjs.org/@deepseek-harness-tui/dsh-tui/-/dsh-tui-${_npmver}.tgz")
    
      17sha256sums=('a28d9f62dac49ab12c305e74e1ec9eed5396838e73b28406b467e3841192d1c4')
    
      18
    
      19prepare() {
    
      20  rm -rf npm-root npm-cache
    
      21  mkdir -p npm-root/usr npm-cache
    
      22
    
      23  npm install --global \
    
      24    --prefix "$srcdir/npm-root/usr" \
    
      25    --cache "$srcdir/npm-cache" \
    
      26    --omit=dev \
    
      27    --omit=peer \
    
      28    --no-audit \
    
      29    --no-fund \
    
      30    "$srcdir/dsh-tui-${_npmver}.tgz"
    
      31}
    
      32
    
      33package() {
    
      34  cp -a "$srcdir/npm-root/usr/." "$pkgdir/usr/"
    
      35  install -Dm644 "$srcdir/package/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      36  find "$pkgdir/usr" -type d -exec chmod 755 {} +
    
      37  chown -R root:root "$pkgdir"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-20 15:11:35	Low	2