helium-d77

CLEAN

maintainer dani-77 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from source hosted on the project's own GitHub repository, uses a verifiable checksum, and installs only compiled Rust binaries and static assets; no remote code execution or untrusted payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Daniel Azevedo <daniazevedo77@posteo.net>
    
      2
    
      3pkgname=helium-d77
    
      4pkgver=0.1.10
    
      5pkgrel=1
    
      6pkgdesc="Wayland shell built with the Helium shell framework"
    
      7arch=('x86_64')
    
      8url="https://github.com/dani-77/helium-d77"
    
      9license=('MIT')
    
      10depends=('wayland' 'libglvnd' 'libxkbcommon' 'fontconfig' 'freetype2' 'pam' 'gcc-libs' 'glibc'
    
      11         'wl-clipboard' 'curl')
    
      12makedepends=('cargo' 'pkgconf' 'git')
    
      13optdepends=(
    
      14  'alsa-utils: volume widget and OSD'
    
      15  'brightnessctl: brightness OSD'
    
      16  'power-profiles-daemon: power profile toggle'
    
      17  'swaybg: wallpaper backend'
    
      18  'ollama: backend for helium-ollama'
    
      19  'pciutils: GPU detection in helium-ollama'
    
      20)
    
      21source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/$pkgver.tar.gz")
    
      22sha256sums=('e5a573cc898bd8d036fdaff90dc48952901bb1bb96d4ee8f0a630b2f6221d744')
    
      23
    
      24prepare() {
    
      25    cd "$pkgname-$pkgver"
    
      26    export RUSTUP_TOOLCHAIN=stable
    
      27    cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      28}
    
      29
    
      30build() {
    
      31    cd "$pkgname-$pkgver"
    
      32    export RUSTUP_TOOLCHAIN=stable
    
      33    export CARGO_TARGET_DIR=target
    
      34    cargo build --frozen --release
    
      35}
    
      36
    
      37package() {
    
      38    cd "$pkgname-$pkgver"
    
      39
    
      40    # Same binaries as the Makefile's BINS and the Void template: helium-locker
    
      41    # is deliberately left out (upstream niri/layer-shika incompatibility, see
    
      42    # doc/TECHNICAL.md).
    
      43    for bin in helium-shell helium-launcher helium-session helium-osd \
    
      44               helium-wallpaper helium-backdrop helium-ollama; do
    
      45        install -Dm755 "target/release/$bin" "$pkgdir/usr/bin/$bin"
    
      46    done
    
      47    install -Dm644 assets/d77-logo.svg "$pkgdir/usr/share/helium-d77/d77-logo.svg"
    
      48
    
      49    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      50    install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      51    install -Dm644 doc/TECHNICAL.md "$pkgdir/usr/share/doc/$pkgname/TECHNICAL.md"
    
      52}
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 23:16:08	Low	1