fenriz-desktop-git

maintainer zackb · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own code, and no untrusted prebuilt binaries or malicious payloads are involved.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package builds from a public Git repository with a SKIP'd checksum, but the source is the project's own code, and no untrusted prebuilt binaries or malicious payloads are involved.

PKGBUILD

      1pkgname=fenriz-desktop-git
    
      2pkgver=0.1.12
    
      3pkgrel=1
    
      4pkgdesc="Desktop shell for Wayland compositors"
    
      5arch=('x86_64')
    
      6url="https://github.com/zackb/fenriz"
    
      7license=('MIT')
    
      8depends=('gtk4' 'gtk4-layer-shell' 'glib2' 'wayland' 'polkit' 'wireplumber' 'pam')
    
      9makedepends=('cmake' 'ninja' 'git' 'wayland-protocols')
    
      10optdepends=('fenriz: the compositor this shell is built for'
    
      11            'fprintd: fingerprint unlock, see /usr/share/fenriz-desktop/pam'
    
      12            'xdg-desktop-portal: file chooser for the wallpaper picker')
    
      13provides=('fenriz-desktop')
    
      14conflicts=('fenriz-desktop' 'fenriz-desktop-bin')
    
      15backup=('etc/pam.d/fenriz-desktop')
    
      16source=("git+${url}.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19# the git source dir is named after the repo, not the package
    
      20pkgver() {
    
      21    cd fenriz
    
      22    git describe --long --tags | sed 's/\([^-]*-g\)/r\1/;s/-/./g;s/^v//'
    
      23}
    
      24
    
      25build() {
    
      26    cmake -B build -S fenriz/desktop -G Ninja \
    
      27        -DCMAKE_BUILD_TYPE=Release \
    
      28        -DCMAKE_INSTALL_PREFIX=/usr
    
      29    cmake --build build
    
      30}
    
      31
    
      32package() {
    
      33    DESTDIR="$pkgdir" cmake --install build
    
      34}
    
      35

Changes since previous scan

--- PKGBUILD @ 2026-08-15 00:26
+++ PKGBUILD @ 2026-08-18 00:03
@@ -1,5 +1,5 @@
 pkgname=fenriz-desktop-git
-pkgver=0.1.11
+pkgver=0.1.12
 pkgrel=1
 pkgdesc="Desktop shell for Wayland compositors"
 arch=('x86_64')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 07:30:18	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 05:27:47	LOW	2
2026-08-14 00:03:41	CLEAN	2
2026-08-13 07:25:43	LOW	1
2026-08-13 03:25:23	LOW	1