hyprlayer-server-bin

LOW

maintainer bitshifxr 0 votes scanned 2026-09-19 00:25:36.748935

View on AUR

Why flagged

The package downloads a prebuilt binary from GitHub Releases, which is a standard and generally trustworthy source; the binary is not executed during build but installed as-is, and the checksums are provided and valid, reducing supply-chain risk despite the new and low-voted AUR entry.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from GitHub Releases, which is a standard and generally trustworthy source; the binary is not executed during build but installed as-is, and the checksums are provided and valid, reducing supply-chain risk despite the new and low-voted AUR entry.

PKGBUILD

      1# Maintainer: Jon Tsiros <jon@brightblock.ai>
    
      2
    
      3pkgname=hyprlayer-server-bin
    
      4pkgver=0.8.0
    
      5pkgrel=1
    
      6pkgdesc="Hyprlayer runtime as a headless server, reached over a local socket or SSH"
    
      7arch=('x86_64')
    
      8url="https://brightblock.ai/hyprlayer"
    
      9license=('LicenseRef-proprietary')
    
      10# Deliberately no webkit2gtk/gtk3: a headless host runs this without a desktop.
    
      11depends=('git')
    
      12optdepends=('claude-code: run Claude Code agent sessions'
    
      13            'github-cli: PR status and publishing'
    
      14            'hyprlayer: thoughts and project management the runtime shells out to')
    
      15provides=('hyprlayer-server')
    
      16conflicts=('hyprlayer-server')
    
      17options=('!strip' '!debug')
    
      18_bin="hyprlayer-server-x86_64-unknown-linux-gnu"
    
      19source=("${_bin}-${pkgver}::https://github.com/BrightBlock/hyprlayer-releases/releases/download/v${pkgver}/${_bin}"
    
      20        "hyprlayer-server.service")
    
      21sha256sums=('dc2e11878f5af7e294da64cd29c291a4de0d6a8455b3eb2a38f3c391db5f0bc1'
    
      22            'e578119d5152948b1ba56576c36825d63bce9ad1266e1c8ac661365cd597adae')
    
      23
    
      24package() {
    
      25  install -Dm755 "${srcdir}/${_bin}-${pkgver}" "${pkgdir}/usr/bin/hyprlayer-server"
    
      26  # A user unit, never a system one: every RuntimePaths entry is home-relative.
    
      27  # Installed, not enabled — `systemctl --user enable --now hyprlayer-server`.
    
      28  install -Dm644 "${srcdir}/hyprlayer-server.service" \
    
      29    "${pkgdir}/usr/lib/systemd/user/hyprlayer-server.service"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-19 00:25:36	Low	2
2026-09-18 23:29:28	Low	2