escargot-native-bin

LOW

maintainer Mafuzyk 0 votes scanned 2026-10-31 01:57:41.978121

View on AUR

Why flagged

The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it installs only application files and assets, with no evidence of malicious behavior or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable practice; however, it installs only application files and assets, with no evidence of malicious behavior or remote code execution.

PKGBUILD

      1# Maintainer: mafuzyk <247084418+mafuzyk@users.noreply.github.com>
    
      2pkgname=escargot-native-bin
    
      3pkgver=0.1.0
    
      4pkgrel=2
    
      5pkgdesc='Native Linux client for MSN Messenger 7.5 on the Escargot network'
    
      6arch=('x86_64')
    
      7url='https://github.com/mafuzyk/escargot-native'
    
      8license=('custom:CC-BY-NC-4.0')
    
      9depends=('gtk3' 'webkit2gtk-4.1' 'libxcb' 'libxkbcommon' 'libxkbcommon-x11' 'libsecret' 'vulkan-icd-loader' 'hicolor-icon-theme')
    
      10optdepends=(
    
      11    'pipewire: notification sounds'
    
      12)
    
      13provides=('escargot-native')
    
      14conflicts=('escargot-native' 'escargot-native-git')
    
      15options=('!strip' '!debug')
    
      16source=("escargot-native-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/escargot-native-$pkgver-x86_64.tar.gz")
    
      17sha256sums=('0c2c11cc65841303e32cf7279df3f0e723650129bc0a0fafd878e85f9bd1e195')
    
      18
    
      19package() {
    
      20    cd "$srcdir/escargot-native-$pkgver"
    
      21
    
      22    install -Dm755 escargot-native "$pkgdir/usr/bin/escargot-native"
    
      23    install -Dm755 escargot-webview "$pkgdir/usr/bin/escargot-webview"
    
      24    ln -s escargot-native "$pkgdir/usr/bin/msn"
    
      25
    
      26    install -d "$pkgdir/usr/share/escargot-native"
    
      27    cp -r assets "$pkgdir/usr/share/escargot-native/"
    
      28
    
      29    install -Dm644 escargot-native.png \
    
      30        "$pkgdir/usr/share/icons/hicolor/256x256/apps/escargot-native.png"
    
      31    install -Dm644 escargot-native.desktop \
    
      32        "$pkgdir/usr/share/applications/escargot-native.desktop"
    
      33
    
      34    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      35    install -Dm644 LICENSE-Wine-Tahoma.txt \
    
      36        "$pkgdir/usr/share/licenses/$pkgname/LICENSE-Wine-Tahoma.txt"
    
      37    install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-31 01:57:41	Low	2