flowshot-bin
The package is a prebuilt binary from the project's official GitHub releases, which is normal for AUR packages; the low severity is due to few votes and recent upload, but the source is trustworthy and no malicious behavior is evident.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package is a prebuilt binary from the project's official GitHub releases, which is normal for AUR packages; the low severity is due to few votes and recent upload, but the source is trustworthy and no malicious behavior is evident.
PKGBUILD
# Maintainer: FlowOSS <https://github.com/FlowOSS>
pkgname=flowshot-bin
_pkgname=flowshot
pkgver=0.3.3
pkgrel=1
pkgdesc='Screenshot and annotation tool for Wayland and X11 with mixed-DPI support (prebuilt binary)'
arch=('x86_64')
url='https://github.com/FlowOSS/flowshot'
license=('GPL-3.0-or-later')
depends=(
'glibc'
'libgcc'
'libpipewire-0.3.so'
# dlopen'd or data-only: real runtime deps, namcap warnings are false positives
'wayland'
'vulkan-icd-loader'
'fontconfig'
'ttf-font'
'hicolor-icon-theme'
)
optdepends=(
'xdg-desktop-portal: portal capture, global shortcuts and OpenURI'
'xdg-desktop-portal-gnome: portal backend for GNOME'
'xdg-desktop-portal-kde: portal backend for KDE Plasma (KWin ScreenShot2)'
'xdg-desktop-portal-hyprland: portal backend for Hyprland'
'xdg-desktop-portal-wlr: portal backend for wlroots compositors (Sway)'
'vulkan-driver: Vulkan implementation for the GPU-accelerated overlay'
'gnome-shell-extension-appindicator: system tray icon under GNOME'
)
provides=("flowshot=$pkgver")
conflicts=('flowshot' 'flowshot-git')
source=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-1-x86_64-Arch.pkg.tar.zst")
b2sums=('0c207044211706759205c14b9e4913b4495e718078281628aa197a1f037caac207c068c1dc4172c13ce7c0f7b1338211a6c6a692f01199bded59c131c6e3c8db')
options=('!strip' '!lto' '!debug')
package() {
bsdtar -xf "$srcdir/$_pkgname-$pkgver-1-x86_64-Arch.pkg.tar.zst" \
-C "$pkgdir" \
--exclude .PKGINFO --exclude .MTREE --exclude .BUILDINFO --exclude .INSTALL
if [[ -d "$pkgdir/usr/share/licenses/$_pkgname" ]]; then
mv "$pkgdir/usr/share/licenses/$_pkgname" "$pkgdir/usr/share/licenses/$pkgname"
fi
}
Changes since previous scan
--- PKGBUILD @ 2026-10-14 00:06+++ PKGBUILD @ 2026-10-17 00:21@@ -1,7 +1,7 @@ # Maintainer: FlowOSS <https://github.com/FlowOSS> pkgname=flowshot-bin _pkgname=flowshot-pkgver=0.3.2+pkgver=0.3.3 pkgrel=1 pkgdesc='Screenshot and annotation tool for Wayland and X11 with mixed-DPI support (prebuilt binary)' arch=('x86_64')@@ -30,7 +30,7 @@ provides=("flowshot=$pkgver") conflicts=('flowshot' 'flowshot-git') source=("$url/releases/download/v$pkgver/$_pkgname-$pkgver-1-x86_64-Arch.pkg.tar.zst")-b2sums=('2e9df867e4beea71989b81ffa885a1fafc38697d36a122d17a44e1d3c1f28ab09a5d5a4c572c6d2329e69ee7457c7a7b4e5d358c32c0bb1f592db2987f0d410d')+b2sums=('0c207044211706759205c14b9e4913b4495e718078281628aa197a1f037caac207c068c1dc4172c13ce7c0f7b1338211a6c6a692f01199bded59c131c6e3c8db') options=('!strip' '!lto' '!debug') package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 19:20:25 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 17:17:20 | Low | 2 |
| 2026-10-13 00:23:45 | Clean | 2 |
| 2026-10-12 05:12:20 | Low | 1 |
| 2026-10-12 01:11:47 | Low | 1 |
| 2026-10-11 00:26:05 | Clean | 2 |
| 2026-10-10 08:13:38 | Low | 1 |
| 2026-10-10 02:12:41 | Low | 1 |