hyprland-revolver-git

maintainer ray0rfire · 0 votes · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package builds from its own git source, installs only data and scripts under /usr, and uses a systemd user unit to run a harmless installer in the user's context; no remote code execution or malicious payloads are present.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from its own git source, installs only data and scripts under /usr, and uses a systemd user unit to run a harmless installer in the user's context; no remote code execution or malicious payloads are present.

PKGBUILD

1# Maintainer: minerofthesoal <your-email@example.com>
2pkgname=hyprland-revolver-git
3_pkgname=hyprland-revolver
4pkgver=r1.0000000
5pkgrel=1
6pkgdesc="Spinnable revolver desktop widget for illogical-impulse/Quickshell, loaded from Steam/PrismLauncher/MultiMC"
7arch=('any')
8url="https://github.com/minerofthesoal/hyprland-revolver"
9license=('MIT')
10depends=('python' 'bash')
11optdepends=(
12 'quickshell: required to actually run the widget'
13 'quickshell-git: alternative build of quickshell, either works'
14 'prismlauncher: to chamber PrismLauncher instances instead of Steam games'
15 'multimc: to chamber MultiMC instances instead of Steam games (best-effort - see README)'
16)
17provides=("$_pkgname")
18conflicts=("$_pkgname")
19source=("$_pkgname::git+$url.git")
20sha256sums=('SKIP')
21install=hyprland-revolver-git.install
22
23pkgver() {
24 cd "$_pkgname"
25 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
26}
27
28package() {
29 cd "$_pkgname"
30
31 # Ship the widget source + installer under /usr/share; it patches a
32 # per-user Quickshell config, so it can't be installed system-wide the
33 # way a normal package would - the user has to run the installer
34 # themselves, as themselves, against their own ~/.config.
35 install -d "$pkgdir/usr/share/$_pkgname/bin"
36 install -d "$pkgdir/usr/share/$_pkgname/qml"
37 cp -r bin/revolver_lib "$pkgdir/usr/share/$_pkgname/bin/revolver_lib"
38 find "$pkgdir/usr/share/$_pkgname/bin/revolver_lib" -type f -name '*.py' -exec chmod 644 {} \;
39 install -m755 bin/revolver-scan "$pkgdir/usr/share/$_pkgname/bin/"
40 install -m755 bin/revolver-configure "$pkgdir/usr/share/$_pkgname/bin/"
41 install -m755 bin/_patch_background.py "$pkgdir/usr/share/$_pkgname/bin/"
42 install -m644 qml/RevolverBarrel.qml "$pkgdir/usr/share/$_pkgname/qml/"
43 install -m755 install.sh "$pkgdir/usr/share/$_pkgname/install.sh"
44
45 install -Dm644 README.md "$pkgdir/usr/share/doc/$_pkgname/README.md"
46 install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
47
48 # Enabled-by-default systemd --user unit: pacman/makepkg run as root
49 # and can only ever stage files under /usr, so they can't run
50 # install.sh themselves (it patches your own $HOME as you). This
51 # unit is how that last step actually gets to run unattended anyway -
52 # as *you*, in *your* systemd --user session, the next time you log
53 # in - instead of just telling you to run a command by hand.
54 install -Dm644 hyprland-revolver-setup.service \
55 "$pkgdir/usr/lib/systemd/user/hyprland-revolver-setup.service"
56 install -d "$pkgdir/usr/lib/systemd/user/default.target.wants"
57 ln -s ../hyprland-revolver-setup.service \
58 "$pkgdir/usr/lib/systemd/user/default.target.wants/hyprland-revolver-setup.service"
59
60 # Thin wrapper so `hyprland-revolver-install` is on $PATH after pacman -S;
61 # it just execs the real installer, which resolves bin/ and qml/
62 # relative to its own path via BASH_SOURCE.
63 install -Dm755 /dev/stdin "$pkgdir/usr/bin/hyprland-revolver-install" <<'WRAPPER'
64#!/usr/bin/env bash
65exec "/usr/share/hyprland-revolver/install.sh" "$@"
66WRAPPER
67}
68

Changes since previous scan

--- PKGBUILD @ 2026-08-17 00:18
+++ PKGBUILD @ 2026-08-18 00:03
@@ -45,6 +45,18 @@
install -Dm644 README.md "$pkgdir/usr/share/doc/$_pkgname/README.md"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$_pkgname/LICENSE"
+ # Enabled-by-default systemd --user unit: pacman/makepkg run as root
+ # and can only ever stage files under /usr, so they can't run
+ # install.sh themselves (it patches your own $HOME as you). This
+ # unit is how that last step actually gets to run unattended anyway -
+ # as *you*, in *your* systemd --user session, the next time you log
+ # in - instead of just telling you to run a command by hand.
+ install -Dm644 hyprland-revolver-setup.service \
+ "$pkgdir/usr/lib/systemd/user/hyprland-revolver-setup.service"
+ install -d "$pkgdir/usr/lib/systemd/user/default.target.wants"
+ ln -s ../hyprland-revolver-setup.service \
+ "$pkgdir/usr/lib/systemd/user/default.target.wants/hyprland-revolver-setup.service"
+
# Thin wrapper so `hyprland-revolver-install` is on $PATH after pacman -S;
# it just execs the real installer, which resolves bin/ and qml/
# relative to its own path via BASH_SOURCE.

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 2
2026-08-17 01:34:23 LOW 2
2026-08-17 00:18:29 CLEAN 2
2026-08-16 09:32:18 LOW 1
2026-08-16 00:03:42 CLEAN 2
2026-08-15 05:30:14 LOW 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion