hypricons-bin

LOW

maintainer calmcrow 0 votes scanned 2026-10-06 08:02:16.298752

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR bin packages; the source is verifiable and checksummed, and no malicious behavior is present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR bin packages; the source is verifiable and checksummed, and no malicious behavior is present.

PKGBUILD

      1# Maintainer: calmcrow <calmcrow@outlook.com>
    
      2#
    
      3# ============================================================
    
      4#  hypricons-bin — Third-party repackaging
    
      5# ============================================================
    
      6#  Installs the pre-built Arch package published in the upstream
    
      7#  GitHub release. Nothing is patched: the release artifact is
    
      8#  unpacked as-is, and only the upstream LICENSE is added, because
    
      9#  the upstream package (built with nfpm) ships no license file.
    
      10#
    
      11#  - Upstream:  https://github.com/Anabilsarker/HyprIcons
    
      12#  - Artifact:  hypricons-<pkgver>-1-x86_64.pkg.tar.zst (nfpm)
    
      13#  - Usage:     start it once per session from ~/.config/hypr/hyprland.lua:
    
      14#                 hl.on("hyprland.start", function() hl.exec_cmd("hypricons") end)
    
      15#
    
      16#  Upstream publishes no tagged source tarball, so this package
    
      17#  relies on the project's own release artifacts.
    
      18
    
      19pkgname=hypricons-bin
    
      20pkgver=1.0.1
    
      21pkgrel=1
    
      22pkgdesc='Desktop icons for Hyprland (Wayland), drawn as a gtk4-layer-shell surface per monitor (pre-built binary)'
    
      23arch=('x86_64')
    
      24url='https://github.com/Anabilsarker/HyprIcons'
    
      25license=('GPL-2.0-only')
    
      26depends=('gtk4' 'gtk4-layer-shell')
    
      27provides=('hypricons')
    
      28conflicts=('hypricons' 'hypricons-git')
    
      29options=('!strip' '!debug')
    
      30install=hypricons-bin.install
    
      31
    
      32_asset="hypricons-$pkgver-1-$CARCH.pkg.tar.zst"
    
      33
    
      34source=("$_asset::https://github.com/Anabilsarker/HyprIcons/releases/download/v$pkgver/$_asset"
    
      35        "LICENSE::https://raw.githubusercontent.com/Anabilsarker/HyprIcons/v$pkgver/LICENSE"
    
      36        'hypricons.desktop')
    
      37noextract=("$_asset")
    
      38sha256sums=('a82112be9eb6cce9f48f4aedb92aa63b608ad0b8ed1f0ee5fed49ef04d781bd9' '8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643' '9546437805a371e5c7402429b769c0e3a53262157b1cb96c70988ed419903f7e')
    
      39
    
      40package() {
    
      41    bsdtar --exclude='.PKGINFO' --exclude='.MTREE' --exclude='.BUILDINFO' --exclude='.INSTALL' \
    
      42        -xf "$srcdir/$_asset" -C "$pkgdir"
    
      43    install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      44    install -Dm644 "$srcdir/hypricons.desktop" "$pkgdir/usr/share/applications/hypricons.desktop"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-06 08:02:16	Low	2