high-tide-launcher-git

LOW
maintainer Mopigames 0 votes scanned 2026-09-10 21:21:21.441781
View on AUR
Why flagged

The package builds from a public git repository with no remote code execution or obfuscated downloads; the low severity is due to few votes and recent upload, not malicious content.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public git repository with no remote code execution or obfuscated downloads; the low severity is due to few votes and recent upload, not malicious content.

PKGBUILD

1# Maintainer: MopigamesYT <mopigames@proton.me>
2pkgname=high-tide-launcher-git
3pkgver=0.1.0.r3.g065d31d
4pkgrel=1
5pkgdesc='Native GTK4 launcher for Vape on Linux (git)'
6arch=('x86_64')
7url='https://github.com/MopigamesYT/High-Tide'
8license=('LicenseRef-Unknown')
9depends=('gtk4>=4.12' 'glib2' 'glibc' 'libgcc' 'cairo' 'hicolor-icon-theme'
10 'python' 'bash' 'jdk17-openjdk' 'java-runtime>=17'
11 'unzip' 'coreutils' 'findutils' 'gawk' 'sed' 'grep' 'procps-ng'
12 'util-linux' 'fontconfig' 'freetype2' 'libx11' 'libxtst' 'libxi'
13 'libxext' 'glu' 'libglvnd')
14makedepends=('git' 'cargo' 'pkgconf')
15checkdepends=('desktop-file-utils')
16optdepends=('wine: account sign-in and payload extraction'
17 'wireshark-cli: loopback capture and payload assembly'
18 'nftables: Wine login network workaround'
19 'polkit: desktop authentication for temporary capture access'
20 'prismlauncher: launch Minecraft instances')
21provides=('high-tide' 'high-tide-launcher')
22conflicts=('high-tide' 'high-tide-launcher')
23# Preserve the shipped native bridges byte-for-byte; they cannot be rebuilt from
24# the source in this repository. The Rust binary is stripped by its own profile.
25options=('!strip' '!debug')
26# The checkout uses $pkgname, not "high-tide": the wrapper source file below
27# claims that name in $srcdir, and the two would collide.
28source=("$pkgname::git+https://github.com/MopigamesYT/High-Tide.git"
29 'collect_backend.py'
30 'high-tide'
31 'test_workspace.py'
32 'dev.hightide.Launcher.desktop'
33 'dev.hightide.capture.policy'
34 'LICENSE-NOTICE')
35sha256sums=('SKIP'
36 '7ee9ad1f396293bf4a8c6fb3bc84bc0d43b1ef26f036e83bfa70c37bd053a073'
37 '5983bc035d91e5ca86a03cc7f59dcd3d50b6d88540dd09e811c26cdf45bf1b89'
38 'e4a38ed610f8f85e1f58d1942b70102b718b2ad1d9773015881ba7e8496833db'
39 'e61981f4f808990622b188b94f2c26de00bdd94b4909e3876218f70c7ebc11e0'
40 '753eb991ac6f980fa1e349879d5c36982bffa0fac14297144090240f12572080'
41 'b9f67d9e65ce8bd850f6eaf2a72e7bf58316cd7ef55d54b442465cc60a315698')
42
43pkgver() {
44 cd "$srcdir/$pkgname"
45 local version
46 version="$(sed -n '/^\[package\]/,/^\[/ s/^version *= *"\(.*\)"/\1/p' launcher/Cargo.toml | head -1)"
47 printf '%s.r%s.g%s' "${version:-0.1.0}" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
48}
49
50prepare() {
51 cd "$srcdir/$pkgname"
52 cargo fetch --locked --manifest-path launcher/Cargo.toml
53}
54
55build() {
56 cd "$srcdir/$pkgname"
57 export RUSTUP_TOOLCHAIN=stable
58 # Target baseline x86-64 rather than the build machine's CPU.
59 export RUSTFLAGS='-C target-cpu=x86-64'
60 # A reused makepkg build tree can hold a launcher from an older revision.
61 CARGO_TARGET_DIR="$srcdir/target" cargo clean --release -p high-tide --manifest-path launcher/Cargo.toml
62 CARGO_TARGET_DIR="$srcdir/target" cargo build --frozen --release --manifest-path launcher/Cargo.toml
63 python3 "$srcdir/collect_backend.py" "$srcdir/$pkgname" "$srcdir"
64}
65
66check() {
67 cd "$srcdir/$pkgname"
68 export RUSTUP_TOOLCHAIN=stable
69 export RUSTFLAGS='-C target-cpu=x86-64'
70 CARGO_TARGET_DIR="$srcdir/target" cargo test --frozen --release --manifest-path launcher/Cargo.toml
71 python3 "$srcdir/test_workspace.py"
72 HIGH_TIDE_CAPTURE_TEST_ROOT="$srcdir/backend" python3 tools/test_capture_session.py
73 desktop-file-validate "$srcdir/dev.hightide.Launcher.desktop"
74}
75
76package() {
77 cd "$srcdir/$pkgname"
78 install -Dm755 "$srcdir/target/release/high-tide" "$pkgdir/usr/lib/high-tide/high-tide"
79 install -Dm755 "$srcdir/high-tide" "$pkgdir/usr/bin/high-tide"
80 install -Dm755 tools/high-tide-capture-helper "$pkgdir/usr/lib/high-tide/high-tide-capture-helper"
81 install -Dm644 "$srcdir/dev.hightide.capture.policy" \
82 "$pkgdir/usr/share/polkit-1/actions/dev.hightide.capture.policy"
83 # Install only the files the current manifest lists, never a directory
84 # wholesale: a reused source tree can still hold an older revision's files.
85 python3 - "$srcdir" "$pkgdir/usr/lib/high-tide/backend" <<'PY'
86import json, pathlib, shutil, sys
87staging, target = pathlib.Path(sys.argv[1]), pathlib.Path(sys.argv[2])
88for name in json.loads((staging / 'backend-manifest.json').read_text()):
89 destination = target / name
90 destination.parent.mkdir(parents=True, exist_ok=True)
91 shutil.copy2(staging / 'backend' / name, destination)
92PY
93 install -Dm644 "$srcdir/backend-manifest.json" "$pkgdir/usr/lib/high-tide/backend-manifest.json"
94 install -Dm644 "$srcdir/dev.hightide.Launcher.desktop" \
95 "$pkgdir/usr/share/applications/dev.hightide.Launcher.desktop"
96 install -Dm644 launcher/data/dev.hightide.Launcher.svg \
97 "$pkgdir/usr/share/icons/hicolor/scalable/apps/dev.hightide.Launcher.svg"
98 install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
99 install -Dm644 launcher/README.md "$pkgdir/usr/share/doc/$pkgname/launcher.md"
100 install -Dm644 "$srcdir/LICENSE-NOTICE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE-NOTICE"
101}
102

Scan history

Scanned at (UTC)SeverityRules
2026-09-10 21:21:21 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion