garuda-toolbox

LOW

maintainer dr460nf1r3 0 votes scanned 2026-08-29 17:40:20.882297

View on AUR

Why flagged

The package builds from a legitimate GitLab source associated with Garuda Linux, uses system Electron, and installs standard application files; the low severity is due to SKIP'd checksum and recent upload with few votes, but no malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate GitLab source associated with Garuda Linux, uses system Electron, and installs standard application files; the low severity is due to SKIP'd checksum and recent upload with few votes, but no malicious behavior is present.

PKGBUILD

      1# Maintainer: dr460nf1r3 <root at dr460nf1r3 dot org>
    
      2
    
      3pkgname=garuda-toolbox
    
      4pkgver=6.2.0
    
      5pkgrel=1
    
      6_commit='eec393edc0eb4dc73587935f58b6456068aef25c'
    
      7_electronversion=43
    
      8pkgdesc="Garuda Toolbox - A collection of useful tools to manage your Garuda Linux system"
    
      9arch=('any')
    
      10url="https://gitlab.com/garuda-linux/applications/toolbox"
    
      11license=('GPL-3.0-or-later')
    
      12depends=('bash' 'curl' "electron${_electronversion}" 'pacman-contrib' 'garuda-libs>=1.6.0' 'archlinux-appstream-data' 'util-linux')
    
      13makedepends=('git' 'base-devel' 'nodejs' 'pnpm')
    
      14optdepends=('paru: show pending AUR updates'
    
      15  'meld: compare pacdiff files via a GUI on GTK systems'
    
      16  'pace: manage Pacman repositories via a GUI'
    
      17  'reflector-simple: update Arch mirrorlists interactively'
    
      18  'btrfs-assistant: easily manage Btrfs snapshots and further settings')
    
      19options=('!strip' '!emptydirs' '!debug')
    
      20source=("https://gitlab.com/garuda-linux/applications/toolbox/-/archive/${_commit}/toolbox-${_commit}.tar.gz")
    
      21sha256sums=('SKIP')
    
      22# Replaces all of garuda-settings-manager
    
      23replaces=('garuda-settings-manager' 'garuda-settings-manager-git' 'garuda-settings-manager-kcm' 'garuda-settings-manager-kcm-git' 'garuda-settings-manager-notifier' 'garuda-settings-manager-knotifier' 'garuda-settings-manager-knotifier-git' 'garuda-settings-manager-notifier-git' 'garuda-rani'
    
      24  'garuda-boot-options' 'garuda-boot-repair' 'garuda-assistant' 'garuda-welcome' 'garuda-gamer')
    
      25provides=('garuda-rani')
    
      26
    
      27prepare() {
    
      28  cd toolbox-$_commit || exit
    
      29
    
      30  sed -i -e "
    
      31        s/@electronversion@/${_electronversion}/g
    
      32        s/@appname@/${pkgname}/g
    
      33        s/@runname@/app.asar/g
    
      34        s/@cfgdirname@/${pkgname}/g
    
      35        s/@options@/env ELECTRON_OZONE_PLATFORM_HINT=auto --disable-vulkan/g
    
      36    " "${srcdir}/toolbox-$_commit/assets/garuda-toolbox.sh"
    
      37
    
      38  export ELECTRON_SKIP_BINARY_DOWNLOAD=1
    
      39  export SYSTEM_ELECTRON_VERSION="$(electron${_electronversion} -v | sed 's/v//g')"
    
      40  export ELECTRON_OVERRIDE_DIST_PATH="/usr/lib/electron${_electronversion}"
    
      41  export CI=true
    
      42
    
      43  HOME="${srcdir}/.electron-gyp"
    
      44  mkdir -p "${srcdir}/.electron-gyp"
    
      45  sed -i "s/\"electron\": \"[^\"]*\"/\"electron\": \"${SYSTEM_ELECTRON_VERSION}\"/g" package.json
    
      46  NODE_ENV=development pnpm -r install --no-frozen-lockfile --force
    
      47}
    
      48
    
      49build() {
    
      50  cd toolbox-$_commit || exit
    
      51  local electronDist="/usr/lib/electron${_electronversion}"
    
      52
    
      53  NODE_ENV=production pnpm run build
    
      54  NODE_ENV=production pnpm exec electron-builder --linux dir \
    
      55    --config electron-builder.mjs \
    
      56    -c.electronDist="${electronDist}" \
    
      57    -c.electronVersion="${SYSTEM_ELECTRON_VERSION}"
    
      58}
    
      59
    
      60package() {
    
      61  install -Dm755 "${srcdir}/toolbox-$_commit/assets/garuda-toolbox.sh" "${pkgdir}/usr/bin/${pkgname}"
    
      62  install -Dm755 "${srcdir}/toolbox-$_commit/assets/garuda-toolbox-pty-wrapper" "${pkgdir}/usr/libexec/garuda-toolbox-pty-wrapper"
    
      63  install -Dm644 "${srcdir}/toolbox-$_commit/dist/linux-unpacked/resources/app.asar" -t "${pkgdir}/usr/lib/${pkgname}"
    
      64  install -Dm644 "${srcdir}/toolbox-$_commit/assets/${pkgname}.desktop" -t "${pkgdir}/usr/share/applications"
    
      65  install -Dm644 "${srcdir}/toolbox-$_commit/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      66  install -Dm644 "${srcdir}/toolbox-$_commit/assets/images/garuda-purple.svg" "${pkgdir}/usr/share/icons/${pkgname}.svg"
    
      67  install -Dm644 "${srcdir}/toolbox-$_commit/assets/images/garuda-purple.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/${pkgname}.svg"
    
      68  install -Dm644 "${srcdir}/toolbox-$_commit/assets/org.garudalinux.toolbox.policy" "${pkgdir}/usr/share/polkit-1/actions/org.garudalinux.toolbox.policy"
    
      69}
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-29 17:40:20	Low	2