haven-desktop-bin

LOW

maintainer HavenSoftware 0 votes scanned 2026-09-06 05:10:24.165680

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is normal for Electron apps; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is normal for Electron apps; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

      1# Maintainer: Haven Software <havensoftware@zohomail.com>
    
      2pkgname=haven-desktop-bin
    
      3pkgver=0.8.0
    
      4pkgrel=1
    
      5pkgdesc="Matrix chat and social client, built on Element Web/Desktop (prebuilt binary)"
    
      6arch=('x86_64')
    
      7url="https://app.haven.software"
    
      8license=('AGPL-3.0-only')
    
      9provides=('haven-desktop')
    
      10conflicts=('haven-desktop')
    
      11options=('!strip' '!debug')
    
      12depends=(
    
      13    'gtk3'
    
      14    'nss'
    
      15    'libxss'
    
      16    'libnotify'
    
      17    'libayatana-appindicator'
    
      18    'alsa-lib'
    
      19    'at-spi2-core'
    
      20    'libsecret'
    
      21    'c-ares'
    
      22    'libevent'
    
      23    'libvpx'
    
      24    'libxslt'
    
      25    're2'
    
      26    'snappy'
    
      27)
    
      28source=("https://github.com/Haven-Organization/haven-desktop/releases/download/haven-v${pkgver}/haven-desktop-${pkgver}.pacman"
    
      29        "LICENSE::https://raw.githubusercontent.com/Haven-Organization/haven-desktop/haven-v${pkgver}/LICENSE")
    
      30sha256sums=('eddec64c5efb749f16b44ab8ccc910e316c8a8d45fbf61bd16a5a2c35cef419f'
    
      31            '3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986')
    
      32install=haven-desktop-bin.install
    
      33
    
      34package() {
    
      35    cd "$srcdir"
    
      36    # Upstream already ships this as a real pacman package (built by electron-builder's
    
      37    # fpm-based pacman target) - re-extract just the file payload rather than its own
    
      38    # .PKGINFO/.MTREE/.BUILDINFO/.INSTALL, and let makepkg regenerate correct metadata
    
      39    # from this PKGBUILD instead. Its own depends list is fpm's generic Debian-style
    
      40    # default (some names like http-parser/libappindicator-gtk3 don't exist as such on
    
      41    # Arch) - hand-curated above instead, based on what other Electron AUR packages use.
    
      42    bsdtar -xf "haven-desktop-${pkgver}.pacman" -C "$pkgdir" --exclude='.PKGINFO' --exclude='.MTREE' --exclude='.BUILDINFO' --exclude='.INSTALL'
    
      43
    
      44    install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-06 05:10:24	Low	2
2026-09-06 03:10:21	Low	2