fluorine-manager-bin

LOW

maintainer parzival-space 1 votes scanned 2026-08-31 00:19:57.373659

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the source is verifiable and the build process is transparent, posing no inherent security risk despite the recent maintainer change.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for -bin packages; the source is verifiable and the build process is transparent, posing no inherent security risk despite the recent maintainer change.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Vladislav <your@email.com>
    
      2pkgname=fluorine-manager-bin
    
      3pkgver=0.2.2
    
      4pkgrel=1
    
      5pkgdesc="A native Linux mod manager for Bethesda and other games, built on MO2"
    
      6arch=('x86_64')
    
      7url="https://github.com/SulfurNitride/Fluorine-Manager"
    
      8license=('GPL-3.0-or-later')
    
      9depends=('fuse3' 'gtk3')
    
      10provides=('fluorine-manager')
    
      11conflicts=('fluorine-manager')
    
      12options=(!strip)
    
      13
    
      14# The upstream tag appends '-A' to the version number
    
      15_tag="${pkgver}"
    
      16
    
      17source=("fluorine-manager-${pkgver}.tar.gz::https://github.com/SulfurNitride/Fluorine-Manager/releases/download/v0.2.2/fluorine-manager-0.2.2.tar.gz")
    
      18sha256sums=('6b7b0ed8e36dc026e298bc5bca4352a2dd0a2658830e0530275f714ec85c99be')
    
      19
    
      20package() {
    
      21    # The zip extracts to a 'Fluorine-Manager' directory
    
      22    cd "$srcdir/fluorine-manager"
    
      23
    
      24    # Install the entire app bundle to /opt
    
      25    install -dm755 "${pkgdir}/opt/fluorine-manager"
    
      26    cp -r . "${pkgdir}/opt/fluorine-manager/"
    
      27
    
      28    # Make sure the real executable and the upstream launcher are executable
    
      29    chmod 755 "${pkgdir}/opt/fluorine-manager/ModOrganizer-core"
    
      30    chmod 755 "${pkgdir}/opt/fluorine-manager/fluorine-manager"
    
      31
    
      32    # Create a wrapper in /usr/bin that replicates the upstream launcher logic
    
      33    # but targets the fixed /opt install path instead of doing the sync dance.
    
      34    install -dm755 "${pkgdir}/usr/bin"
    
      35    cat > "${pkgdir}/usr/bin/fluorine-manager" << 'EOF'
    
      36#!/usr/bin/env bash
    
      37set -euo pipefail
    
      38
    
      39RUN="/opt/fluorine-manager"
    
      40
    
      41# Save the original environment so game launches (Proton/Wine) can restore it.
    
      42export FLUORINE_ORIG_LD_LIBRARY_PATH="${LD_LIBRARY_PATH:-}"
    
      43export FLUORINE_ORIG_LD_PRELOAD="${LD_PRELOAD:-}"
    
      44export FLUORINE_ORIG_PATH="${PATH}"
    
      45export FLUORINE_ORIG_XDG_DATA_DIRS="${XDG_DATA_DIRS:-/usr/local/share:/usr/share}"
    
      46export FLUORINE_ORIG_QT_PLUGIN_PATH="${QT_PLUGIN_PATH:-}"
    
      47
    
      48# Steam injects 32-bit gameoverlayrenderer.so via LD_PRELOAD which causes
    
      49# "wrong ELF class" errors for 64-bit Qt6 apps. Clear it for our process.
    
      50unset LD_PRELOAD
    
      51
    
      52export PATH="${RUN}:${PATH}"
    
      53
    
      54# Use only our bundled libs — avoids conflicts with Steam scout/soldier runtime.
    
      55export LD_LIBRARY_PATH="${RUN}/lib"
    
      56
    
      57export MO2_BASE_DIR="${RUN}"
    
      58export MO2_PLUGINS_DIR="${RUN}/plugins"
    
      59
    
      60unset PYTHONPATH PYTHONNOUSERSITE PYTHONHOME MO2_PYTHON_DIR
    
      61
    
      62# Use bundled Qt6 plugins.
    
      63export QT_PLUGIN_PATH="${RUN}/qt6plugins"
    
      64export QT_QPA_PLATFORM_PLUGIN_PATH="${RUN}/qt6plugins/platforms"
    
      65
    
      66# Raise open file descriptor limit for large modlists with FUSE VFS.
    
      67ulimit -n 65536 2>/dev/null
    
      68
    
      69cd "${RUN}"
    
      70exec "${RUN}/ModOrganizer-core" "$@"
    
      71EOF
    
      72    chmod 755 "${pkgdir}/usr/bin/fluorine-manager"
    
      73
    
      74    # Install icon
    
      75    install -Dm644 "icons/com.fluorine.manager.png" \
    
      76        "${pkgdir}/usr/share/icons/hicolor/256x256/apps/com.fluorine.manager.png"
    
      77
    
      78    # Install the .desktop file that ships inside the zip,
    
      79    # patching Exec= to point to our /usr/bin wrapper.
    
      80    install -dm755 "${pkgdir}/usr/share/applications"
    
      81    sed "s|^Exec=fluorine-manager|Exec=/usr/bin/fluorine-manager|" \
    
      82        "icons/com.fluorine.manager.desktop" \
    
      83        > "${pkgdir}/usr/share/applications/com.fluorine.manager.desktop"
    
      84
    
      85    # Install license if present
    
      86    if [ -f "LICENSE" ]; then
    
      87        install -Dm644 "LICENSE" \
    
      88            "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      89    fi
    
      90}
    
      91

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-31 00:19:57	Low	2
2026-08-30 23:44:22	Medium	1
2026-06-18 16:11:54	Clean	0