hermes-agent-desktop-bin

LOW

maintainer jabla 0 votes scanned 2026-09-08 15:17:32.240420

View on AUR

Why flagged

The package is a prebuilt binary wrapper from a personal GitHub release, but sources are verifiable and the payload is limited to a desktop app installation without additional execution or network calls at install time.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package is a prebuilt binary wrapper from a personal GitHub release, but sources are verifiable and the payload is limited to a desktop app installation without additional execution or network calls at install time.

PKGBUILD

      1# Maintainer: jabla <jabla3000@duck.com>
    
      2#
    
      3# Prebuilt by GitHub Actions in https://github.com/jabla/hermes-agent-desktop-bin
    
      4# (archlinux container, non-root makepkg). The artifact is the finished Arch
    
      5# package; this PKGBUILD only re-wraps it, nothing is compiled here.
    
      6pkgname=hermes-agent-desktop-bin
    
      7_pkgname=hermes-desktop          # /usr/bin launcher name
    
      8_upstream=Hermes                 # productName
    
      9pkgver=0.21.1
    
      10pkgrel=1
    
      11pkgdesc="Official Hermes Agent desktop app from Nous Research — chat, voice, file browser, and settings UI for the local agent runtime (prebuilt binary)"
    
      12arch=('x86_64')
    
      13url='https://github.com/NousResearch/hermes-agent'
    
      14license=('MIT')
    
      15depends=(
    
      16  'curl' 'electron42' 'git' 'hicolor-icon-theme' 'libnotify' 'libsecret'
    
      17  'xdg-utils'
    
      18)
    
      19optdepends=(
    
      20  'libayatana-appindicator: tray indicator support'
    
      21)
    
      22conflicts=('hermes-agent-desktop')
    
      23options=('!debug')
    
      24source=("https://github.com/jabla/hermes-agent-desktop-bin/releases/download/v${pkgver}-${pkgrel}/${pkgname}-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst")
    
      25sha256sums=('5c27e7a5027d2df34a9e34c1ed4fb54c6a8aceb29aee187daabaefb55f81b517')
    
      26
    
      27# The downloaded source is itself a complete Arch package. Extract only its
    
      28# payload (usr/); metadata (.PKGINFO/.MTREE/.BUILDINFO) is regenerated by
    
      29# makepkg for this wrapper package.
    
      30package() {
    
      31  bsdtar -xf "${srcdir}/${pkgname}-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst" \
    
      32    -C "${pkgdir}" ./usr
    
      33}
    
      34

Changes since previous scan

--- PKGBUILD @ 2026-07-23 05:22
+++ PKGBUILD @ 2026-09-08 15:17
@@ -1,65 +1,34 @@
-# Maintainer: latte
-
+# Maintainer: jabla <jabla3000@duck.com>
+#
+# Prebuilt by GitHub Actions in https://github.com/jabla/hermes-agent-desktop-bin
+# (archlinux container, non-root makepkg). The artifact is the finished Arch
+# package; this PKGBUILD only re-wraps it, nothing is compiled here.
 pkgname=hermes-agent-desktop-bin
-_pkgname=hermes-desktop
-pkgver=0.7.6
+_pkgname=hermes-desktop          # /usr/bin launcher name
+_upstream=Hermes                 # productName
+pkgver=0.21.1
 pkgrel=1
-pkgdesc='Desktop companion for Hermes Agent'
+pkgdesc="Official Hermes Agent desktop app from Nous Research — chat, voice, file browser, and settings UI for the local agent runtime (prebuilt binary)"
 arch=('x86_64')
-url='https://github.com/fathah/hermes-desktop'
+url='https://github.com/NousResearch/hermes-agent'
 license=('MIT')
 depends=(
-  'alsa-lib'
-  'at-spi2-core'
-  'gtk3'
-  'dbus'
-  'hicolor-icon-theme'
-  'libnotify'
-  'libsecret'
-  'libxss'
-  'libxtst'
-  'nss'
-  'util-linux-libs'
+  'curl' 'electron42' 'git' 'hicolor-icon-theme' 'libnotify' 'libsecret'
   'xdg-utils'
 )
 optdepends=(
-  'git: install and update a local Hermes Agent from first-run setup'
-  'libappindicator-gtk3: tray indicator support'
-  'python: run Hermes Agent locally'
-  'uv: install and run Hermes Agent locally'
+  'libayatana-appindicator: tray indicator support'
 )
-provides=('hermes-agent-desktop' 'hermes-desktop')
-conflicts=('hermes-agent-desktop' 'hermes-desktop')
-options=('!strip')
-source=("${_pkgname}-${pkgver}-LICENSE::https://raw.githubusercontent.com/fathah/hermes-desktop/v${pkgver}/LICENSE")
-source_x86_64=("${_pkgname}_${pkgver}_amd64.deb::${url}/releases/download/v${pkgver}/${_pkgname}_${pkgver}_amd64.deb")
-sha256sums=('85d12b0f8894e7095f904a9a89fcfaea1b0d037cbfb4a12aba81daa87bcdbcd4')
-sha256sums_x86_64=('9bbc2e0a828b706a3e47f2bde5a4fec0c1d709f1df21a92a1ecf55bdfa6b6732')
+conflicts=('hermes-agent-desktop')
+options=('!debug')
+source=("https://github.com/jabla/hermes-agent-desktop-bin/releases/download/v${pkgver}-${pkgrel}/${pkgname}-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst")
+sha256sums=('5c27e7a5027d2df34a9e34c1ed4fb54c6a8aceb29aee187daabaefb55f81b517')
 
+# The downloaded source is itself a complete Arch package. Extract only its
+# payload (usr/); metadata (.PKGINFO/.MTREE/.BUILDINFO) is regenerated by
+# makepkg for this wrapper package.
 package() {
-  bsdtar -xOf "${srcdir}/${_pkgname}_${pkgver}_amd64.deb" data.tar.xz |
-    bsdtar -xJf - -C "${pkgdir}"
-
-  # Upstream's .deb installs under "Hermes One"; Arch packages should keep
-  # bundled application payloads under /opt/${pkgname}.
-  mv "${pkgdir}/opt/Hermes One" "${pkgdir}/opt/${pkgname}"
-
-  install -dm755 "${pkgdir}/usr/bin"
-  ln -s "/opt/${pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
-
-  install -Dm644 /dev/stdin "${pkgdir}/usr/share/applications/${_pkgname}.desktop" <<EOF
-[Desktop Entry]
-Name=Hermes One
-Exec=/opt/${pkgname}/${_pkgname} %U
-Terminal=false
-Type=Application
-Icon=${_pkgname}
-StartupWMClass=Hermes One
-Comment=Hermes One is a native desktop app for installing, configuring, and chatting with Hermes Agent — a self-improving AI assistant with tool use, multi-platform messaging, and a closed learning loop.
-Categories=Utility;
-EOF
-
-  install -Dm644 "${srcdir}/${_pkgname}-${pkgver}-LICENSE" \
-    "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
+  bsdtar -xf "${srcdir}/${pkgname}-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst" \
+    -C "${pkgdir}" ./usr
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-08 15:17:32	Low	2
2026-07-23 05:22:32	Clean	0
2026-07-04 05:13:51	Clean	0
2026-07-03 05:10:23	Clean	0
2026-06-27 06:28:17	Clean	0
2026-06-24 06:18:56	Clean	0
2026-06-22 06:12:16	Clean	0
2026-06-21 06:09:41	Clean	0
2026-06-19 22:34:54	Clean	0
2026-06-18 16:11:54	Clean	0