fabric-d77

CLEAN

maintainer dani-77 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a pinned commit of the project's own GitHub repository, which is normal for AUR packages without official releases; all dependencies are legitimate and the source, while not whitelisted, is plausibly owned by the maintainer and contains only Python/GTK code typical for a desktop shell.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Daniel Azevedo <daniazevedo77@posteo.net>
    
      2
    
      3pkgname=fabric-d77
    
      4pkgver=1.2.0
    
      5pkgrel=1
    
      6pkgdesc="GTK desktop shell for Wayland compositors, built on Fabric"
    
      7arch=('any')
    
      8url="https://github.com/dani-77/fabric-d77"
    
      9license=('MIT')
    
      10depends=(
    
      11  'python'
    
      12  'python-gobject'
    
      13  'python-cairo'
    
      14  'python-cffi'
    
      15  'python-click'
    
      16  'python-loguru'
    
      17  'python-pillow'
    
      18  'python-psutil'
    
      19  'python-rapidfuzz'
    
      20  'python-requests'
    
      21  'python-setproctitle'
    
      22  'python-six'
    
      23  'python-pam'
    
      24  'python-thefuzz'
    
      25  'python-fabric'
    
      26  'gtk-session-lock'
    
      27  'alsa-utils'
    
      28  'brightnessctl'
    
      29)
    
      30optdepends=(
    
      31  'awww: wallpaper picker backend'
    
      32  'cmus: music picker and dashboard player controls'
    
      33  'ffmpeg: read artist/album tags in the music picker (ffprobe)'
    
      34  'xdg-user-dirs: locate the music folder'
    
      35  'xdg-terminal-exec: pick the default terminal when $TERMINAL is unset'
    
      36  'ollama: backend for the Ollama Chat popup'
    
      37)
    
      38backup=('etc/pam.d/fabric-d77')
    
      39# No upstream release tags yet: pinned to the same commit as the Void template
    
      40# in srcpkgs-d77. Bump _commit and sha256sums together.
    
      41_commit=b2e1878f0876c2ffc14cbc002fce188c13b69457
    
      42source=("$pkgname-$pkgver.tar.gz::$url/archive/$_commit.tar.gz")
    
      43sha256sums=('27bcbba677b70f868c46c77d4bb7c1b4982a1a999e614687dfc719ecc104d66e')
    
      44
    
      45package() {
    
      46    cd "$pkgname-$_commit"
    
      47    make DESTDIR="$pkgdir" install
    
      48    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 23:16:08	Low	1