ghostty-rpc-bin

maintainer katsura-kotaro · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package installs a pre-compiled binary from a non-whitelisted host with unverified checksums (SKIP), posing a supply-chain risk if the release asset were silently replaced.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 90%): The package installs a pre-compiled binary from a non-whitelisted host with unverified checksums (SKIP), posing a supply-chain risk if the release asset were silently replaced.

PKGBUILD

      1# Maintainer: Vinay <vinayydv343@gmail.com>
    
      2pkgname=ghostty-rpc-bin
    
      3pkgver=1.1.0
    
      4pkgrel=1
    
      5pkgdesc="Discord Rich Presence integration for Ghostty terminal (pre-compiled binary)"
    
      6arch=('x86_64')
    
      7url="https://github.com/vinayydv3695/ghostty-rpc"
    
      8license=('MIT')
    
      9depends=('gcc-libs')
    
      10provides=('ghostty-rpc')
    
      11conflicts=('ghostty-rpc')
    
      12source_x86_64=("$pkgname-$pkgver-x86_64.tar.gz::$url/releases/download/v$pkgver/ghostty-rpc-v$pkgver-x86_64.tar.gz"
    
      13               "service::$url/raw/v$pkgver/assets/ghostty-rpc.service"
    
      14               "config.example::$url/raw/v$pkgver/assets/config.toml.example")
    
      15sha256sums_x86_64=('1cfd66c8e90950577ef00ce42972882cfc29afe5a97564fe4f28c0cad6f9555b'
    
      16                   'SKIP'
    
      17                   'SKIP')
    
      18
    
      19package() {
    
      20    # Install pre-compiled binary
    
      21    install -Dm755 "ghostty-rpc" "$pkgdir/usr/bin/ghostty-rpc"
    
      22    
    
      23    # Install systemd user service
    
      24    install -Dm644 "service" "$pkgdir/usr/lib/systemd/user/ghostty-rpc.service"
    
      25    
    
      26    # Install systemd user preset to automatically enable service for desktop login
    
      27    install -d "$pkgdir/usr/lib/systemd/user-preset"
    
      28    echo "enable ghostty-rpc.service" > "$pkgdir/usr/lib/systemd/user-preset/50-ghostty-rpc.preset"
    
      29
    
      30    # Install example config
    
      31    install -Dm644 "config.example" "$pkgdir/usr/share/doc/$pkgname/config.toml.example"
    
      32}
    
      33

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 17:21:24	MEDIUM	2