gnome-remote-desktop-git

LOW

maintainer jose1711 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package builds from the official GNOME GitLab repository, which is a trusted and project-owned source; the recent orphaning and re-adoption is a maintenance concern but does not indicate malicious intent or supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official GNOME GitLab repository, which is a trusted and project-owned source; the recent orphaning and re-adoption is a maintenance concern but does not indicate malicious intent or supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Gabriel Rauter <rauter.gabriel@gmail.com>
    
      2
    
      3_pkgname=gnome-remote-desktop
    
      4pkgname=$_pkgname-git
    
      5pkgver=42.1.1.2.gbfa4b2c
    
      6pkgrel=1
    
      7pkgdesc='Remote desktop daemon for GNOME using pipewire'
    
      8arch=('i686' 'x86_64' 'armv6h' 'armv7h')
    
      9url="https://wiki.gnome.org/Projects/Mutter/RemoteDesktop"
    
      10license=('GPL2')
    
      11depends=(
    
      12  'cairo'
    
      13  'dconf'
    
      14  'freerdp'
    
      15  'fuse3'
    
      16  'libnotify'
    
      17  'libepoxy'
    
      18  'libsecret'
    
      19  'libvncserver'
    
      20  'pipewire'
    
      21)
    
      22makedepends=(
    
      23  'git'
    
      24  'asciidoc'
    
      25  'ffnvcodec-headers'
    
      26  'meson'
    
      27)
    
      28optdepends=('nvidia-utils: Nvidia NVDEC/NVENC support')
    
      29provides=("$_pkgname")
    
      30conflicts=("$_pkgname")
    
      31source=(git+https://gitlab.gnome.org/GNOME/$_pkgname.git)
    
      32sha512sums=('SKIP')
    
      33
    
      34pkgver() {
    
      35  cd $_pkgname
    
      36  git describe --long | sed 's/^v//;s/-/./g;s/_/./g;'
    
      37}
    
      38
    
      39build() {
    
      40  rm -rf build
    
      41  arch-meson $_pkgname build
    
      42  ninja -C build
    
      43}
    
      44
    
      45package() {
    
      46  DESTDIR="$pkgdir/" ninja -C build install
    
      47}
    
      48
    
      49# vim:set ts=2 sw=2 et:
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 21:11:00	Medium	1
2026-10-11 00:26:05	Low	2
2026-10-10 22:16:18	Medium	1
2026-06-18 16:11:54	Clean	0