hornero-greeter

LOW

maintainer ulises-jeremias 0 votes scanned 2026-09-15 07:19:15.107868

View on AUR

Why flagged

The package builds a theme from its official GitHub repository; the source is non-executable data (QML, configs, images, video links) and the only risk is from unverified git content due to skipped checksum, but it does not execute remote code or exfiltrate data.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds a theme from its official GitHub repository; the source is non-executable data (QML, configs, images, video links) and the only risk is from unverified git content due to skipped checksum, but it does not execute remote code or exfiltrate data.

PKGBUILD

      1# Maintainer: HorneroOS contributors <https://github.com/HorneroOS/greeter>
    
      2pkgname=hornero-greeter
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5pkgdesc='HorneroOS SDDM greeter theme (Argentina footage, offline)'
    
      6arch=('any')
    
      7url='https://github.com/HorneroOS/greeter'
    
      8license=('GPL-3.0-only')
    
      9depends=('sddm' 'qt5-multimedia' 'gst-plugins-good')
    
      10optdepends=('hornero-greeter-media-base: Argentina video pack')
    
      11# Named "$pkgname" so the checkout lands at "${srcdir}/$pkgname";
    
      12# package() below only ever reads from there, so AUR chroot builds
    
      13# behave exactly like local packaging/ builds.
    
      14source=("$pkgname::git+https://github.com/HorneroOS/greeter.git")
    
      15sha256sums=('SKIP')
    
      16
    
      17package() {
    
      18  local src="$srcdir/$pkgname" dest="$pkgdir/usr/share/sddm/themes/hornero/"
    
      19  install -d "$dest"
    
      20  # Theme payload: QML, configs, static fallback (all required).
    
      21  install -Dm644 "$src/Main.qml" "${dest}Main.qml"
    
      22  for f in theme.conf theme.conf.user metadata.desktop background.jpg; do
    
      23    install -Dm644 "$src/$f" "${dest}$f"
    
      24  done
    
      25  cp -a "$src/components" "$dest"
    
      26  # Runtime video catalog (generated from media/catalog.json, committed):
    
      27  # entries resolve clips under media/base/ relative to the theme root.
    
      28  install -Dm644 "$src/media/catalog.js" "${dest}media/catalog.js"
    
      29  # Bridge to the optional hornero-greeter-media-base pack. The link dangles
    
      30  # when the pack is absent; the deck then skips the missing files and holds
    
      31  # the static fallback, so the theme works with or without the pack.
    
      32  ln -sfn /usr/share/hornero/greeter/media/base "${dest}media/base"
    
      33  # Layered SDDM snippet: selects this theme WITHOUT rewriting /etc/sddm.conf.
    
      34  install -Dm644 "$src/packaging/arch/hornero-greeter/hornero.conf" \
    
      35    "$pkgdir/etc/sddm.conf.d/10-hornero.conf"
    
      36  # sddm-readable permissions throughout.
    
      37  find "$pkgdir" -type d -exec chmod 0755 {} +
    
      38  find "$pkgdir" -type f -exec chmod 0644 {} +
    
      39}
    
      40

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-15 07:19:15	Low	2