google-voice-electron-archlinux
LOW
maintainer ProphetPX
0 votes
scanned 2026-10-21 07:31:05.029830
Why flagged
The package builds from a public git repository with visible source code, installs only project files and assets, and creates a launcher script; the low severity is due to unverified sources (SKIP'd checksums) and low popularity, but no malicious behavior is evident.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with visible source code, installs only project files and assets, and creates a launcher script; the low severity is due to unverified sources (SKIP'd checksums) and low popularity, but no malicious behavior is evident.
PKGBUILD
1
# Maintainer: ProphetPX <prophetpx@gmail.com>
2
pkgname=google-voice-electron-archlinux
3
pkgver=1.3.1
4
pkgrel=17
5
pkgdesc="An electron shell wrapper for the google voice app tailored for Arch Linux"
6
arch=("any")
7
url="https://github.com/ProphetPX/google-voice-electron-archlinux"
8
license=("ISC")
9
depends=("electron" "nodejs" "npm")
10
source=("google-voice-electron-archlinux::git+https://github.com"
11
"google-voice-desktop.desktop")
12
sha256sums=("SKIP"
13
"SKIP")
14
15
package() {
16
# 1. Setup the standard global system library directories
17
install -d "$pkgdir/usr/lib/google-voice-electron-archlinux"
18
19
# 2. Extract configuration metadata, local scripts, assets, and backend modules out of the download sandbox
20
cp -L "$srcdir/google-voice-electron-archlinux/package.json" "$pkgdir/usr/lib/google-voice-electron-archlinux/"
21
cp "$srcdir/google-voice-electron-archlinux/main.js" "$pkgdir/usr/lib/google-voice-electron-archlinux/"
22
cp -r "$srcdir/google-voice-electron-archlinux/src" "$pkgdir/usr/lib/google-voice-electron-archlinux/"
23
cp -r "$srcdir/google-voice-electron-archlinux/node_modules" "$pkgdir/usr/lib/google-voice-electron-archlinux/"
24
cp -r "$srcdir/google-voice-electron-archlinux/images" "$pkgdir/usr/lib/google-voice-electron-archlinux/"
25
26
# 3. Explicitly enforce global system read permissions on all files to prevent Electron read failures
27
find "$pkgdir/usr/lib/google-voice-electron-archlinux" -type d -exec chmod 755 {} +
28
find "$pkgdir/usr/lib/google-voice-electron-archlinux" -type f -exec chmod 644 {} +
29
30
# 4. Mount the desktop system application launcher menu icon profile globally
31
install -d "$pkgdir/usr/share/applications"
32
install -Dm644 "$srcdir/google-voice-desktop.desktop" "$pkgdir/usr/share/applications/google-voice-desktop.desktop"
33
34
# 5. Integrate the high-resolution visual branding icon asset globally
35
if [ -f "$srcdir/google-voice-electron-archlinux/images/icon.png" ]; then
36
install -Dm644 "$srcdir/google-voice-electron-archlinux/images/icon.png" "$pkgdir/usr/share/pixmaps/google-voice.png"
37
fi
38
39
# 6. Build the official upstream binary launcher script that passes arguments to the folder path context cleanly
40
install -d "$pkgdir/usr/bin"
41
echo -e "#!/bin/sh\nexec electron /usr/lib/google-voice-electron-archlinux \"\$@\"" > "$pkgdir/usr/bin/google-voice-desktop"
42
chmod +x "$pkgdir/usr/bin/google-voice-desktop"
43
}
44
45
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-21 07:31:05 | Low | 2 |