flavor-bin

LOW

maintainer Amilie 0 votes scanned 2026-10-08 16:09:18.783063

View on AUR

Why flagged

The package builds from official GitHub releases with signed checksums, installs only project binaries and configs, and has no remote code execution or data exfiltration; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from official GitHub releases with signed checksums, installs only project binaries and configs, and has no remote code execution or data exfiltration; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

      1# Maintainer: ohemilyy <ohemilyy@proton.me>
    
      2pkgname=flavor-bin
    
      3pkgver=0.1.0beta2
    
      4_ver=${pkgver/beta/-beta.}
    
      5pkgrel=1
    
      6pkgdesc='Several Tailscale and Headscale networks side by side, in one desktop app and daemon'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/tame-gg/Flavor'
    
      9license=('MIT')
    
      10depends=('cairo' 'dbus' 'gdk-pixbuf2' 'glib2' 'glibc' 'gtk3' 'hicolor-icon-theme' 'libayatana-appindicator' 'libgcc' 'libsoup3' 'webkit2gtk-4.1')
    
      11optdepends=('polkit: system-wide names through the flavor-netd helper')
    
      12provides=('flavor')
    
      13conflicts=('flavor')
    
      14backup=('etc/apparmor.d/flavor-netd')
    
      15options=('!strip' '!debug')
    
      16install=flavor-bin.install
    
      17validpgpkeys=('0DFC432162BF84C0FD780619FBB96BCEC0361F01')
    
      18source=("SHA256SUMS-$_ver::$url/releases/download/v$_ver/SHA256SUMS"
    
      19        "SHA256SUMS-$_ver.asc::$url/releases/download/v$_ver/SHA256SUMS.asc")
    
      20source_x86_64=("$url/releases/download/v$_ver/flavor-$_ver-linux-amd64.tar.gz")
    
      21source_aarch64=("$url/releases/download/v$_ver/flavor-$_ver-linux-arm64.tar.gz")
    
      22sha256sums=('9a3e6fc15a24f72bd39bd873e5354d5c7db3227dfa66dc074787d13bf48f58e3'
    
      23            'SKIP')
    
      24sha256sums_x86_64=('7f81284a5701f90dd54377fd71d2be15cb5835ec740ac97df2b4bca3b9cd4673')
    
      25sha256sums_aarch64=('48b4638644addfe720912cbe1424444b4fb12b7feba0c98bd3aabe53022771df')
    
      26
    
      27prepare() {
    
      28  sha256sum --check --ignore-missing "SHA256SUMS-$_ver"
    
      29}
    
      30
    
      31package() {
    
      32  local _arch=amd64
    
      33  [[ $CARCH == aarch64 ]] && _arch=arm64
    
      34  cd "flavor-$_ver-linux-$_arch"
    
      35  cp -a usr etc "$pkgdir/"
    
      36  rm "$pkgdir/usr/libexec/flavor/uninstall" "$pkgdir/usr/share/flavor/manifest"
    
      37  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      38}
    
      39

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 16:09:18	Low	2