dux-shell-git

LOW

maintainer bbedward 0 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The package builds from a public Git repository with no unverifiable binaries or remote code execution; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with no unverifiable binaries or remote code execution; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: Avenge Media <avengemediallc at gmail dot com>
    
      2
    
      3pkgname=dux-shell-git
    
      4_pkgname=dux-shell
    
      5_binname=dms
    
      6pkgver=2.0.0.r43.gb7be4a3
    
      7pkgrel=1
    
      8pkgdesc='Desktop shell for wayland compositors built with Quickshell & GO (git)'
    
      9arch=(x86_64 aarch64)
    
      10url="https://github.com/duxlabs-dev/$_pkgname"
    
      11license=(MIT)
    
      12depends=(dgop
    
      13         quickshell
    
      14         accountsservice)
    
      15optdepends=('cava: Audio visualizer'
    
      16            'i2c-tools: External monitor brightness control'
    
      17            'matugen: Dynamic wallpaper-based theming'
    
      18            'qt6-multimedia: Sound effect support'
    
      19            'power-profiles-daemon: Set power profile'
    
      20            'qt6ct: Qt6 application theming'
    
      21            'cups-pk-helper: Printer Management'
    
      22            'dms-greeter: Dux Shell login screen for greetd')
    
      23makedepends=(git
    
      24             go
    
      25             make)
    
      26provides=("dms-shell=$pkgver" "$_pkgname=$pkgver")
    
      27conflicts=(dms-shell "$_pkgname" dms-shell-git)
    
      28replaces=(dms-shell-git)
    
      29install="$pkgname.install"
    
      30source=("git+$url.git")
    
      31sha256sums=('SKIP')
    
      32
    
      33pkgver() {
    
      34    cd "$_pkgname"
    
      35    git describe --long --tags --abbrev=7 --match="v*" HEAD 2>/dev/null | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g' || echo "0.0.0.r0.$(git rev-parse --short=7 HEAD)"
    
      36}
    
      37
    
      38prepare() {
    
      39	cd "$_pkgname"
    
      40	[ -f .gitmodules ] || return 0
    
      41	git submodule sync
    
      42	git submodule update --init --recursive
    
      43}
    
      44
    
      45build() {
    
      46	cd "$_pkgname/core"
    
      47
    
      48	local VERSION BUILD_TIME COMMIT LDFLAGS_GO
    
      49	VERSION="$(git describe --tags --always 2>/dev/null || echo dev)"
    
      50	BUILD_TIME="$(date -u '+%Y-%m-%d_%H:%M:%S')"
    
      51	COMMIT="$(git rev-parse --short HEAD 2>/dev/null || echo unknown)"
    
      52
    
      53	export CGO_CPPFLAGS="$CPPFLAGS"
    
      54	export CGO_CFLAGS="$CFLAGS"
    
      55	export CGO_CXXFLAGS="$CXXFLAGS"
    
      56	export CGO_LDFLAGS="$LDFLAGS"
    
      57
    
      58	LDFLAGS_GO="-s -w -X main.Version=${VERSION} -X main.buildTime=${BUILD_TIME} -X main.commit=${COMMIT} -linkmode=external"
    
      59
    
      60	make sync-shell
    
      61
    
      62	GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      63	go build -tags 'distro_binary withshell' -ldflags "${LDFLAGS_GO}" ${GOFLAGS} -o "$_binname" "./cmd/$_binname"
    
      64}
    
      65
    
      66package() {
    
      67	cd "$_pkgname"
    
      68	install -Dm0755 -t "$pkgdir/usr/bin/" "core/$_binname"
    
      69	install -Dm0644 -t "$pkgdir/usr/share/doc/$pkgname/" README.md
    
      70	install -Dm0644 "assets/systemd/$_binname.service" "$pkgdir/usr/lib/systemd/user/$_binname.service"
    
      71	install -Dm0644 assets/dms-open.desktop "$pkgdir/usr/share/applications/dms-open.desktop"
    
      72	install -Dm0644 assets/dev.duxlabs.shell.desktop "$pkgdir/usr/share/applications/dev.duxlabs.shell.desktop"
    
      73	install -Dm0644 assets/dev.duxlabs.shell.notepad.desktop "$pkgdir/usr/share/applications/dev.duxlabs.shell.notepad.desktop"
    
      74	install -Dm0644 assets/dev.duxlabs.shell.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/dev.duxlabs.shell.svg"
    
      75
    
      76	install -d "$pkgdir/usr/share/bash-completion/completions" \
    
      77	           "$pkgdir/usr/share/zsh/site-functions" \
    
      78	           "$pkgdir/usr/share/fish/vendor_completions.d"
    
      79	"core/$_binname" completion bash > "$pkgdir/usr/share/bash-completion/completions/$_binname"
    
      80	"core/$_binname" completion zsh  > "$pkgdir/usr/share/zsh/site-functions/_$_binname"
    
      81	"core/$_binname" completion fish > "$pkgdir/usr/share/fish/vendor_completions.d/$_binname.fish"
    
      82}
    
      83

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 19:38:15	Low	2