hermes-one-bin

maintainer NickeyGod · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs a prebuilt .deb from the project's official GitHub releases, which is a normal practice for Electron apps; the source is verifiable via checksum and poses no active exploitation risk.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub releases, which is a normal practice for Electron apps; the source is verifiable via checksum and poses no active exploitation risk.

PKGBUILD

      1# Maintainer: NickeyGod <niklass.schaeffer@gmail.com>
    
      2
    
      3pkgname=hermes-one-bin
    
      4_pkgname=hermes-desktop
    
      5pkgver=0.7.6
    
      6pkgrel=1
    
      7pkgdesc="Hermes One — native desktop app for installing, configuring, and chatting with Hermes Agent"
    
      8arch=('x86_64')
    
      9url="https://github.com/fathah/hermes-desktop"
    
      10license=('MIT')
    
      11depends=(
    
      12  'gtk3'
    
      13  'libnotify'
    
      14  'nss'
    
      15  'libxss'
    
      16  'libxtst'
    
      17  'xdg-utils'
    
      18  'at-spi2-core'
    
      19  'util-linux-libs'
    
      20  'libsecret'
    
      21)
    
      22provides=('hermes-one')
    
      23conflicts=('hermes-one')
    
      24options=('!strip')
    
      25source=(
    
      26  "$_pkgname-$pkgver.deb::https://github.com/fathah/hermes-desktop/releases/download/v$pkgver/hermes-desktop_${pkgver}_amd64.deb"
    
      27  "LICENSE::https://raw.githubusercontent.com/fathah/hermes-desktop/main/LICENSE"
    
      28)
    
      29sha256sums=(
    
      30  '9bbc2e0a828b706a3e47f2bde5a4fec0c1d709f1df21a92a1ecf55bdfa6b6732'
    
      31  '85d12b0f8894e7095f904a9a89fcfaea1b0d037cbfb4a12aba81daa87bcdbcd4'
    
      32)
    
      33noextract=("$_pkgname-$pkgver.deb")
    
      34
    
      35package() {
    
      36  cd "$srcdir"
    
      37
    
      38  # Extract the .deb
    
      39  ar x "$_pkgname-$pkgver.deb"
    
      40
    
      41  # Unpack data.tar.xz into pkgdir
    
      42  mkdir -p data
    
      43  tar -xf data.tar.xz -C data
    
      44
    
      45  # Install files preserving upstream layout
    
      46  cp -a data/. "$pkgdir/"
    
      47
    
      48  # Rename icon to avoid conflict with the unrelated hermes-desktop AUR package
    
      49  find "$pkgdir/usr/share/icons" -name "hermes-desktop.png" -exec sh -c '
    
      50    for f; do
    
      51      dir=$(dirname "$f")
    
      52      mv "$f" "$dir/hermes-one.png"
    
      53    done
    
      54  ' sh {} +
    
      55
    
      56  # Patch .desktop entry: fix icon name and binary symlink
    
      57  desktopfile="$pkgdir/usr/share/applications/hermes-desktop.desktop"
    
      58  sed -i "s/^Icon=hermes-desktop$/Icon=hermes-one/" "$desktopfile"
    
      59  sed -i "s|^Exec=.*$|Exec=hermes-one %U|" "$desktopfile"
    
      60  mv "$desktopfile" "$pkgdir/usr/share/applications/hermes-one.desktop"
    
      61
    
      62  # Fix permissions on chrome-sandbox (SUID required for Electron sandboxing)
    
      63  chmod 4755 "$pkgdir/opt/Hermes One/chrome-sandbox" 2>/dev/null || true
    
      64
    
      65  # Symlink binary to /usr/bin
    
      66  install -d "$pkgdir/usr/bin"
    
      67  ln -s "/opt/Hermes One/hermes-desktop" "$pkgdir/usr/bin/hermes-one"
    
      68
    
      69  # Install upstream MIT license
    
      70  install -Dm644 "$srcdir/LICENSE" \
    
      71    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      72}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 09:11:06	LOW	2