io-workshop-act-bin

LOW

maintainer mustd 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt .deb from the project's official GitHub releases, which is normal for AUR packages bundling self-contained applications; the source is verifiable and the checksums are provided, making the risk low despite the binary origin.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt .deb from the project's official GitHub releases, which is normal for AUR packages bundling self-contained applications; the source is verifiable and the checksums are provided, making the risk low despite the binary origin.

PKGBUILD

      1# Maintainer: Ilya Obukhov <ilya.obukhov.bs@gmail.com>
    
      2# Rendered by deploy/scripts/release-aur.sh from packaging/aur/PKGBUILD.in — edit the template, not the AUR copy.
    
      3pkgname=io-workshop-act-bin
    
      4pkgver=1.0.0
    
      5pkgrel=1
    
      6pkgdesc='ACT — a MyAnimeList client (desktop build)'
    
      7arch=('x86_64')
    
      8url='https://github.com/MustD/act'
    
      9license=('MIT')
    
      10# The bundled runtime brings its own JVM; these are what its AWT and Skia libraries link against.
    
      11depends=('alsa-lib' 'fontconfig' 'freetype2' 'gcc-libs' 'glibc' 'libglvnd' 'libx11' 'libxext' 'libxi' 'libxrender'
    
      12         'libxtst' 'xdg-utils')
    
      13options=('!strip')
    
      14_deb="io-workshop-act_${pkgver}_amd64.deb"
    
      15source=("$_deb::https://github.com/MustD/act/releases/download/$pkgver/$_deb" 'LICENSE')
    
      16noextract=("$_deb")
    
      17sha256sums=('f3520a59a42bb7816f2664dafa8ac5aeb9e129d4715b9636fac1dedf2999150b' '728f66fa204d52fb356bbd85728252f77f77ba61be57816b9b478d772c7bc914')
    
      18
    
      19package() {
    
      20	# A .deb's maintainer scripts never run here, so the menu entry, icon and /usr/bin link are installed by hand.
    
      21	cd "$srcdir"
    
      22	bsdtar -xf "$_deb" 'data.tar.*'
    
      23	bsdtar -xf data.tar.* -C "$pkgdir" --no-same-owner
    
      24
    
      25	install -dm755 "$pkgdir/usr/bin"
    
      26	ln -s /opt/io-workshop-act/bin/ACT "$pkgdir/usr/bin/io-workshop-act"
    
      27
    
      28	install -Dm644 "$pkgdir/opt/io-workshop-act/lib/ACT.png" \
    
      29		"$pkgdir/usr/share/icons/hicolor/512x512/apps/io-workshop-act.png"
    
      30
    
      31	install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/io-workshop-act.desktop" <<'DESKTOP'
    
      32[Desktop Entry]
    
      33Type=Application
    
      34Name=ACT
    
      35Comment=MyAnimeList client
    
      36Exec=io-workshop-act
    
      37Icon=io-workshop-act
    
      38Terminal=false
    
      39Categories=Network;Utility;
    
      40DESKTOP
    
      41
    
      42	install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      43
    
      44	# jpackage's own entry points at /opt paths and Categories=Unknown; ours replaces it.
    
      45	rm -f "$pkgdir/opt/io-workshop-act/lib/io-workshop-act-ACT.desktop"
    
      46}
    
      47

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 15:16:11	Low	2