envirify-bin

LOW

maintainer phaylali 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it installs only data and a binary from the project's own release infrastructure, with no obfuscated code or remote execution, limiting risk to supply-chain trust in the maintainer.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it installs only data and a binary from the project's own release infrastructure, with no obfuscated code or remote execution, limiting risk to supply-chain trust in the maintainer.

PKGBUILD

      1# Maintainer: Phaylali <admin@omniversify.com>
    
      2
    
      3pkgname=envirify-bin
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc='Material 3 GUI to view and edit every environment variable on your system — Arch GUI Environment Manager by Omniversify'
    
      7arch=('x86_64')
    
      8url='https://github.com/phaylali/envirify'
    
      9license=('Unlicense')
    
      10depends=('gtk3')
    
      11makedepends=()
    
      12provides=('envirify')
    
      13conflicts=('envirify')
    
      14options=('!strip' '!lto' '!debug')
    
      15source=("$pkgname-$pkgver.tar.zst::$url/releases/download/v$pkgver/envirify-$pkgver-linux-x86_64.tar.zst"
    
      16        "envirify.desktop::$url/raw/v$pkgver/packaging/envirify.desktop"
    
      17        "envirify.png::$url/raw/v$pkgver/assets/icon-256.png")
    
      18sha256sums=('499871944722232eae1c2ddb30be9c133ef0d455679d165a2b391c1f5cccf39e'
    
      19            '1ce23bfa235a1a740c09c188bdbbff4305287a463a37b3a33bc96b133e1c4a9e'
    
      20            '2c87a16962a47685b897430bb0851804aec84daa9940bf890152abe7389487ab')
    
      21
    
      22package() {
    
      23  # The release bundle extracts straight into $srcdir:
    
      24  #   envirify  lib/  data/
    
      25  install -Dm755 envirify "$pkgdir/opt/envirify/envirify"
    
      26  cp -a lib data "$pkgdir/opt/envirify/"
    
      27
    
      28  install -dm755 "$pkgdir/usr/bin"
    
      29  ln -s /opt/envirify/envirify "$pkgdir/usr/bin/envirify"
    
      30
    
      31  install -Dm644 envirify.desktop "$pkgdir/usr/share/applications/envirify.desktop"
    
      32  install -Dm644 envirify.png \
    
      33    "$pkgdir/usr/share/icons/hicolor/256x256/apps/envirify.png"
    
      34}
    
      35

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 16:14:21	Low	2