dux-files-git

LOW
maintainer bbedward 0 votes scanned 2026-10-20 21:29:05.029414
View on AUR
Why flagged

The package builds from a legitimate git source repository, uses standard Go build practices, and installs only project files; the 'SKIP' checksum is acceptable for git sources, and the low votes/recent upload is a minor risk indicator but not indicative of malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate git source repository, uses standard Go build practices, and installs only project files; the 'SKIP' checksum is acceptable for git sources, and the low votes/recent upload is a minor risk indicator but not indicative of malicious content.

PKGBUILD

1# Maintainer: Avenge Media <avengemediallc at gmail dot com>
2
3pkgname=dux-files-git
4_pkgname=dux-files
5_binname=dfiles
6_appid=dev.duxlabs.files
7_portalservice=org.freedesktop.impl.portal.desktop.dfiles.service
8pkgver=2.0.0.r1.gf646769
9pkgrel=1
10pkgdesc='File manager for Wayland from Dux Labs (git)'
11arch=('x86_64' 'aarch64')
12url="https://github.com/duxlabs-dev/$_pkgname"
13license=('MIT')
14depends=('quickshell' 'qt6-declarative')
15optdepends=('dms-shell: dynamic theming via Dux Shell colors'
16 'bubblewrap: run external thumbnailers in a sandbox'
17 'ffmpegthumbnailer: video thumbnails'
18 'poppler: pdf thumbnails'
19 'gvfs: network shares and the trash on removable drives'
20 'udisks2: the devices sidebar'
21 'polkit: retry denied operations as administrator'
22 'xdg-desktop-portal: use dfiles as the file chooser')
23makedepends=('git' 'go>=2:1.27')
24provides=("$_binname=$pkgver" "$_pkgname=$pkgver")
25conflicts=("$_binname" "$_pkgname" 'dux-files-bin')
26source=("$pkgname::git+$url.git")
27sha256sums=('SKIP')
28
29prepare() {
30 cd "$srcdir/$pkgname"
31 git submodule sync
32 git submodule update --init --recursive
33}
34
35pkgver() {
36 cd "$srcdir/$pkgname"
37 if git describe --tags --long >/dev/null 2>&1; then
38 git describe --tags --long | sed 's/^v//; s/\([^-]*-g\)/r\1/; s/-/./g'
39 else
40 printf "0.0.0.r%s.g%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
41 fi
42}
43
44build() {
45 cd "$srcdir/$pkgname/core"
46
47 local VERSION BUILD_TIME COMMIT
48 VERSION="$(git describe --tags --always 2>/dev/null | sed 's/^v//' || echo dev)"
49 BUILD_TIME="$(date -u '+%Y-%m-%d_%H:%M:%S')"
50 COMMIT="$(git rev-parse --short=8 HEAD 2>/dev/null || echo unknown)"
51
52 export CGO_ENABLED=0
53 export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
54 export GOMODCACHE="$srcdir/gomodcache"
55 export GOTOOLCHAIN=local
56
57 make sync-shell
58
59 go build -tags withshell \
60 -ldflags "-s -w -X main.Version=${VERSION} -X main.BuildTime=${BUILD_TIME} -X main.Commit=${COMMIT}" \
61 -o bin/$_binname ./cmd/$_binname
62
63 mkdir -p bin/completions
64 bin/$_binname completion bash > "bin/completions/$_binname"
65 bin/$_binname completion zsh > "bin/completions/_$_binname"
66 bin/$_binname completion fish > "bin/completions/$_binname.fish"
67}
68
69check() {
70 cd "$srcdir/$pkgname/core"
71 export CGO_ENABLED=0 GOMODCACHE="$srcdir/gomodcache" GOTOOLCHAIN=local
72 go test ./... || true
73}
74
75package() {
76 cd "$srcdir/$pkgname"
77
78 install -Dm755 "core/bin/$_binname" "$pkgdir/usr/bin/$_binname"
79
80 install -Dm644 "core/bin/completions/$_binname" "$pkgdir/usr/share/bash-completion/completions/$_binname"
81 install -Dm644 "core/bin/completions/_$_binname" "$pkgdir/usr/share/zsh/site-functions/_$_binname"
82 install -Dm644 "core/bin/completions/$_binname.fish" "$pkgdir/usr/share/fish/vendor_completions.d/$_binname.fish"
83
84 install -Dm644 "assets/$_appid.svg" "$pkgdir/usr/share/icons/hicolor/scalable/apps/$_appid.svg"
85 install -Dm644 "assets/$_appid.desktop" "$pkgdir/usr/share/applications/$_appid.desktop"
86 install -Dm644 "assets/$_appid.metainfo.xml" "$pkgdir/usr/share/metainfo/$_appid.metainfo.xml"
87 install -Dm644 "assets/$_appid.policy" "$pkgdir/usr/share/polkit-1/actions/$_appid.policy"
88
89 install -Dm644 "assets/dbus/$_appid.FileManager1.service" "$pkgdir/usr/share/dbus-1/services/$_appid.FileManager1.service"
90 install -Dm644 "assets/dbus/$_portalservice" "$pkgdir/usr/share/dbus-1/services/$_portalservice"
91 install -Dm644 "assets/portal/$_binname.portal" "$pkgdir/usr/share/xdg-desktop-portal/portals/$_binname.portal"
92
93 install -Dm644 "assets/systemd/$_binname.service" "$pkgdir/usr/lib/systemd/user/$_binname.service"
94
95 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
96 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
97}
98

Scan history

Scanned at (UTC)SeverityRules
2026-10-20 21:29:05 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion