gnome-shell-extension-vicinae

LOW
maintainer nvidiahater 0 votes scanned 2026-09-11 01:21:31.837469
View on AUR
Why flagged

The package downloads a signed release asset from the project's official GitHub repository, which is a normal and trusted source for GNOME extensions; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a signed release asset from the project's official GitHub repository, which is a normal and trusted source for GNOME extensions; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1pkgname=gnome-shell-extension-vicinae
2pkgver=1.7.2
3pkgrel=1
4pkgdesc="Companion GNOME extension for Vicinae with clipboard monitoring and window management APIs"
5arch=('any')
6url="https://github.com/vicinaehq/gnome-extension"
7license=('MIT')
8depends=('gnome-shell')
9conflicts=("${pkgname}-git")
10_uuid='vicinae@dagimg-dot'
11source=("${_uuid}-${pkgver}.zip::${url}/releases/download/v${pkgver}/${_uuid}.shell-extension-v${pkgver}.zip")
12noextract=("${_uuid}-${pkgver}.zip")
13sha256sums=('d0d79c762c7cac44941d4f74617b156c3a27df255320b8c81a20a3fe1f17284a')
14
15package() {
16 local extension_dir="${pkgdir}/usr/share/gnome-shell/extensions/${_uuid}"
17
18 install -d "${extension_dir}"
19 bsdtar -xf "${_uuid}-${pkgver}.zip" \
20 -C "${extension_dir}" --no-same-owner
21
22 install -Dm644 \
23 "${extension_dir}/schemas/org.gnome.shell.extensions.vicinae.gschema.xml" \
24 -t "${pkgdir}/usr/share/glib-2.0/schemas/"
25 rm -r "${extension_dir}/schemas"
26
27 install -Dm644 "${extension_dir}/LICENSE" \
28 "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
29}
30

Scan history

Scanned at (UTC)SeverityRules
2026-09-11 01:21:31 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion