enclave-messenger

LOW

maintainer nullsector 0 votes scanned 2026-10-24 07:39:45.568380

View on AUR

Why flagged

The package builds from source hosted on the project's own GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the project's own GitHub repository, which is normal for AUR packages; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: The Enclave contributors <security@enclave.chat>
    
      2#
    
      3# Built from the release tag: both Rust workspaces and lyrebird (Go), as
    
      4# `cargo xtask dist` builds them. release.yml's `aur` job sets pkgver,
    
      5# regenerates .SRCINFO and pushes.
    
      6pkgname=enclave-messenger
    
      7pkgver=0.1.0
    
      8pkgrel=1
    
      9pkgdesc='Private messages without a phone number, through Tor and the Nym mixnet'
    
      10arch=('x86_64' 'aarch64')
    
      11url='https://github.com/0xnullsect0r/enclave-messenger'
    
      12license=('GPL-3.0-only')
    
      13depends=('glibc' 'gcc-libs' 'alsa-lib' 'libpipewire' 'fontconfig' 'freetype2' 'ttf-font' 'libxkbcommon' 'libxkbcommon-x11'
    
      14         'wayland' 'libglvnd' 'libx11' 'libxcursor' 'libxi' 'libxrandr' 'hicolor-icon-theme')
    
      15makedepends=('rustup' 'go' 'git' 'clang' 'pkgconf')
    
      16optdepends=('xdg-desktop-portal: system file dialogs'
    
      17            'gnome-keyring: keep the profile key in the Secret Service'
    
      18            'kwallet: keep the profile key in the Secret Service')
    
      19provides=('enclave-messenger')
    
      20conflicts=('enclave-messenger-bin')
    
      21options=('!lto' '!debug')
    
      22_v=${pkgver//_/-}
    
      23source=("git+https://github.com/0xnullsect0r/enclave-messenger.git#tag=v${_v}")
    
      24sha256sums=('SKIP')
    
      25
    
      26prepare() {
    
      27  cd Enclave
    
      28  # The toolchain rust-toolchain.toml names.
    
      29  rustup toolchain install --profile minimal "$(sed -n 's/^channel *= *"\(.*\)"/\1/p' rust-toolchain.toml)"
    
      30  cargo fetch --locked
    
      31  (cd nym && cargo fetch --locked)
    
      32}
    
      33
    
      34build() {
    
      35  cd Enclave
    
      36  ENCLAVE_VERSION=$_v cargo xtask dist --target "${CARCH}-unknown-linux-gnu"
    
      37}
    
      38
    
      39package() {
    
      40  cd "Enclave/target/${CARCH}-unknown-linux-gnu/release/dist"
    
      41  install -d "$pkgdir/usr/lib/enclave-messenger" "$pkgdir/usr/bin"
    
      42  install -m755 enclave enclave-vault enclave-netd enclave-mediad enclave-tord enclave-nymd lyrebird \
    
      43    "$pkgdir/usr/lib/enclave-messenger/"
    
      44  ln -s /usr/lib/enclave-messenger/enclave "$pkgdir/usr/bin/enclave"
    
      45  cp -r --no-preserve=ownership share "$pkgdir/usr/"
    
      46  install -Dm644 THIRD-PARTY-NOTICES.txt "$pkgdir/usr/share/licenses/$pkgname/THIRD-PARTY-NOTICES.txt"
    
      47}
    
      48

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 07:39:45	Low	2