gabbro-bin

maintainer Zabamund · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package re-packages a prebuilt binary from the project's official GitHub release, which is a common and acceptable practice for AUR; the source is verifiable and the checksums are provided, making it low risk despite the binary nature and recent upload.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package re-packages a prebuilt binary from the project's official GitHub release, which is a common and acceptable practice for AUR; the source is verifiable and the checksums are provided, making it low risk despite the binary nature and recent upload.

PKGBUILD

      1# Maintainer: Gabbro <gabbro@tuta.com>
    
      2#
    
      3# gabbro-bin: repackages the prebuilt Gabbro Linux release tarball. Building the
    
      4# full Flutter + Rust stack from source in the AUR is heavy and needless when the
    
      5# release bundle is self-contained -- hence the -bin package (AUR guideline for
    
      6# prebuilt binaries).
    
      7
    
      8pkgname=gabbro-bin
    
      9pkgver=0.1.0_alpha.16
    
      10pkgrel=1
    
      11_pkgver=${pkgver//_/-}   # tag/filename form: 0.1.0-alpha.16
    
      12pkgdesc="Quantum-resistant password manager"
    
      13arch=('x86_64')
    
      14url="https://github.com/gabbro-foss/gabbro"
    
      15license=('GPL-3.0-only')
    
      16depends=('gtk3' 'libfido2' 'libcbor' 'pcsclite')
    
      17optdepends=('xdg-desktop-portal-gtk: native file dialogs (open/save/pick folder)'
    
      18            'pcscd: NFC YubiKey support (running pcscd required)')
    
      19provides=('gabbro')
    
      20conflicts=('gabbro')
    
      21options=('!strip' '!debug')   # prebuilt bundle; don't strip or split debug symbols
    
      22source=("gabbro-${_pkgver}-linux-x86_64.tar.gz::${url}/releases/download/v${_pkgver}/gabbro-${_pkgver}-linux-x86_64.tar.gz"
    
      23        "LICENSE::https://raw.githubusercontent.com/gabbro-foss/gabbro/v${_pkgver}/LICENSE")
    
      24sha256sums=('5c0cd2c8d326bcd12b774ca07674c44f26cb9ac505218ecd2766f70cbbe32c78'
    
      25            '9eb52965f51761109c61c9f91ed4c2ab4017c1d8b14bbb02fb178dbaf1346545')
    
      26
    
      27package() {
    
      28  # Self-contained Flutter bundle -> /usr/lib/gabbro (must stay together).
    
      29  install -dm755 "$pkgdir/usr/lib/gabbro"
    
      30  cp -r "$srcdir/bundle/." "$pkgdir/usr/lib/gabbro/"
    
      31  chmod 755 "$pkgdir/usr/lib/gabbro/gabbro"
    
      32
    
      33  # PATH launcher: a wrapper that execs the bundle binary in place.
    
      34  install -dm755 "$pkgdir/usr/bin"
    
      35  cat > "$pkgdir/usr/bin/gabbro" <<'SH'
    
      36#!/bin/sh
    
      37exec /usr/lib/gabbro/gabbro "$@"
    
      38SH
    
      39  chmod 755 "$pkgdir/usr/bin/gabbro"
    
      40
    
      41  # Icons: the size-agnostic hicolor tree shipped in the tarball.
    
      42  install -dm755 "$pkgdir/usr/share/icons"
    
      43  cp -r "$srcdir/icons/hicolor" "$pkgdir/usr/share/icons/"
    
      44
    
      45  # Desktop entry (Exec via the PATH launcher).
    
      46  install -dm755 "$pkgdir/usr/share/applications"
    
      47  cat > "$pkgdir/usr/share/applications/app.gabbro.gabbro.desktop" <<'DESK'
    
      48[Desktop Entry]
    
      49Type=Application
    
      50Name=Gabbro
    
      51GenericName=Password Manager
    
      52Comment=Quantum-resistant password manager
    
      53Exec=/usr/bin/gabbro
    
      54Icon=gabbro
    
      55Terminal=false
    
      56Categories=Utility;Security;
    
      57Keywords=password;vault;passphrase;security;
    
      58StartupWMClass=app.gabbro.gabbro
    
      59DESK
    
      60
    
      61  # Maintainer copyright notice + GPL-3.0 terms, conveyed with the binary (GPL section 5).
    
      62  # The repo LICENSE carries a copyright holder line that Arch's shared common GPL3 file
    
      63  # does not -- so we ship it rather than rely on that shortcut.
    
      64  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      65}
    
      66

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 21:22:00	LOW	2