evex-mpp-bin

LOW

maintainer zxp19821005 0 votes scanned 2026-11-05 12:09:09.970845

View on AUR

Why flagged

The package installs a prebuilt .deb from the project's official GitHub releases, which is normal for Electron apps; the source is trustworthy and verifiable, and the build process does not execute unreviewed remote code or exhibit malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub releases, which is normal for Electron apps; the source is trustworthy and verifiable, and the build process does not execute unreviewed remote code or exhibit malicious behavior.

PKGBUILD

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2pkgname=evex-mpp-bin
    
      3_pkgname=EvEX-MPP
    
      4pkgver=0.8.0
    
      5_electronversion=45
    
      6pkgrel=1
    
      7pkgdesc="Desktop XMPP client built for EVE Online communities: fleet pings, auto-join rooms, always-on-top alerts, EVE time and themes."
    
      8arch=('x86_64')
    
      9url="https://github.com/AlexDeveOp/EvEX-MPP"
    
      10license=('MIT')
    
      11conflicts=("${pkgname%-bin}")
    
      12provides=("${pkgname%-bin}=${pkgver}")
    
      13depends=(
    
      14	"electron${_electronversion}"
    
      15)
    
      16source=(
    
      17	"${pkgname%-bin}-${pkgver}.deb::${url}/releases/download/v${pkgver}/${pkgname%-bin}_${pkgver}_amd64.deb"
    
      18    "LICENSE-${pkgver}::https://raw.githubusercontent.com/AlexDeveOp/EvEX-MPP/v${pkgver}/LICENSE"
    
      19	"${pkgname%-bin}.js"
    
      20	"${pkgname%-bin}.sh"
    
      21)
    
      22sha256sums=('395b6e8e306249ec4ceaf960a054c54c48e124272db2719381c866fa89b5aa7f'
    
      23            '94dfdcc87fdeac00abb85ee58b68abf53ea754afac459123e39ef21dbfba5865'
    
      24            '562897be8a17076176f8d985c0d7bc1c685f2e7c9b3a932339ce015963243627'
    
      25            'ace275e253744ca62d2572776df26b947f3c89616239985003126db635fc300e')
    
      26_get_app_dir() {
    
      27	find "${srcdir}" -type f -name "resources.pak" ! -path "*/node_modules/*" -printf '%h\n' 2>/dev/null \
    
      28		| while read -r d; do [[ -d "${d}/resources" ]] && { echo "$d"; return 0; }; done
    
      29}
    
      30_check_electron_version() {
    
      31	local _v=$(strings "$(find "$(_get_app_dir)" -maxdepth 1 -type f \
    
      32		-executable -printf '%s %p\n' | sort -nr | head -1 | cut -d' ' -f2-)" \
    
      33		| grep -oP 'Electron/\K[0-9]+' | head -1)
    
      34	[[ -z "$_v" ]] && { echo -e "\033[1;33mNote: Could not check version.\033[0m"; return; }
    
      35	(( _v == _electronversion )) && c=32 || c=31
    
      36	echo -e "Electron version: \033[1;${c}m$_v$([[ $c -eq 31 ]] && echo " (expected $_electronversion)")\033[0m"
    
      37}
    
      38_install_icons() {
    
      39	local _src="${1:-${srcdir}}" _name="${pkgname%-bin}" _icon _ext _size _dest
    
      40	while IFS= read -r -d '' _icon; do
    
      41		_ext="${_icon##*.}"
    
      42		_size=$(echo "${_icon%/*}" | grep -oE '[0-9]+x[0-9]+|scalable' | head -1)
    
      43		[[ -z "${_size}" ]] && _size=$([[ "${_ext}" == svg ]] && echo scalable || od -An -tu1 -j16 -N8 "${_icon}" 2>/dev/null | awk '{printf "%dx%d",$1*16777216+$2*65536+$3*256+$4,$5*16777216+$6*65536+$7*256+$8}')
    
      44		[[ "${_size}" =~ ^[0-9]+x[0-9]+$ ]] || _size=scalable
    
      45		_dest=$([[ "${_icon}" == */share/pixmaps/* ]] && echo pixmaps || echo "icons/hicolor/${_size}/apps")
    
      46		install -Dm644 "${_icon}" "${pkgdir}/usr/share/${_dest}/${_name}.${_ext}"
    
      47	done < <(find "${_src}" \( -path '*/share/icons/*' -o -path '*/share/pixmaps/*' -o -path '*entries/icons/*' \) -type f \( -name '*.png' -o -name '*.svg' \) -print0 2>/dev/null)
    
      48}
    
      49prepare() {
    
      50	sed -i -e "
    
      51		s/@electronversion@/${_electronversion}/g
    
      52		s/@appname@/${pkgname%-bin}/g
    
      53	" "${srcdir}/${pkgname%-bin}.sh" "${srcdir}/${pkgname%-bin}.js"
    
      54	bsdtar -xf "${srcdir}/data."*
    
      55	_check_electron_version
    
      56	sed -i "s/\/opt\/${_pkgname}\///g" "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop"
    
      57}
    
      58package() {
    
      59	install -Dm755 "${srcdir}/${pkgname%-bin}.sh" "${pkgdir}/usr/bin/${pkgname%-bin}"
    
      60	install -Dm644 "${srcdir}/${pkgname%-bin}.js" -t "${pkgdir}/usr/lib/${pkgname%-bin}"
    
      61	cp -a "$(_get_app_dir)/resources/." "${pkgdir}/usr/lib/${pkgname%-bin}/"
    
      62	_install_icons
    
      63	install -Dm644 "${srcdir}/usr/share/applications/${pkgname%-bin}.desktop" -t "${pkgdir}/usr/share/applications"
    
      64    install -Dm644 "${srcdir}/LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      65}
    
      66

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 12:09:09	Low	2