hyprlogin-bin

LOW

maintainer smiley 0 votes scanned 2026-09-13 11:14:35.915839

View on AUR

Why flagged

The package installs a prebuilt binary from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from the project's official repository and the binary is not executed during build; realistic impact is limited to code execution at runtime if the binary were malicious.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a GitHub release, which is a supply-chain risk if the host is compromised, but the source is from the project's official repository and the binary is not executed during build; realistic impact is limited to code execution at runtime if the binary were malicious.

PKGBUILD

      1# Maintainer: smiley <smiley@archlinux.org>
    
      2
    
      3pkgname=hyprlogin-bin
    
      4pkgver=0.3.0
    
      5pkgrel=1
    
      6pkgdesc='Work-in-progress greetd greeter forked from hyprlock (pre-built binary)'
    
      7arch=('x86_64')
    
      8url='https://github.com/AuthenticSm1les/hyprlogin'
    
      9license=('BSD-3-Clause')
    
      10provides=('hyprlogin')
    
      11conflicts=('hyprlogin')
    
      12depends=(
    
      13  'cairo'
    
      14  'gcc-libs'
    
      15  'glibc'
    
      16  'hyprgraphics'
    
      17  'hyprlang'
    
      18  'hyprutils'
    
      19  'libdrm'
    
      20  'mesa'
    
      21  'pango'
    
      22  'pam'
    
      23  'sdbus-cpp'
    
      24  'wayland'
    
      25  'libxkbcommon'
    
      26)
    
      27optdepends=(
    
      28  'greetd: login manager integration'
    
      29  'hyprland: greeter compositor session'
    
      30)
    
      31backup=('etc/hyprlogin/hyprlogin.conf')
    
      32options=(!debug)
    
      33source=(
    
      34  "hyprlogin-$pkgver::$url/releases/download/v$pkgver/hyprlogin"
    
      35  "hyprlogin.conf::$url/raw/refs/tags/v$pkgver/assets/example.conf"
    
      36  "LICENSE::$url/raw/refs/tags/v$pkgver/LICENSE"
    
      37)
    
      38sha256sums=(
    
      39  '6d7e1e8d6278b015e1a787f90b30c28b62eb5bfe025da383534d7b2826287007'
    
      40  'b389671b92182995dc3313ce3a8f9ae0c062dc0c55c6d6341519c2294815b9dd'
    
      41  '52d07f3457591b4496ae2e79b05efd63c7df72135666fa12428d83078c4c0de5'
    
      42)
    
      43
    
      44package() {
    
      45  install -Dm755 "$srcdir/hyprlogin-$pkgver" "$pkgdir/usr/bin/hyprlogin"
    
      46  install -Dm644 "$srcdir/hyprlogin.conf" "$pkgdir/etc/hyprlogin/hyprlogin.conf"
    
      47  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-13 11:14:35	Low	2