jayjay-appimage

LOW

maintainer neko_ayaya 0 votes scanned 2026-10-23 05:36:55.005421

View on AUR

Why flagged

The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and repackaged; the source is trustworthy and checksums are provided, but the AppImage itself is not built from source, representing a normal supply-chain risk for AUR packages of this type.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt AppImage from the project's official GitHub releases, which is then extracted and repackaged; the source is trustworthy and checksums are provided, but the AppImage itself is not built from source, representing a normal supply-chain risk for AUR packages of this type.

PKGBUILD

      1pkgname=jayjay-appimage
    
      2pkgver=0.3.20
    
      3pkgrel=2
    
      4pkgdesc='Native desktop client for Jujutsu version control'
    
      5arch=('x86_64' 'aarch64')
    
      6url='https://jayjay.hewig.dev/'
    
      7license=('BUSL-1.1')
    
      8depends=('fontconfig' 'fuse2' 'gcc-libs' 'libxcb' 'vulkan-driver' 'vulkan-icd-loader' 'wayland' 'xdg-utils')
    
      9optdepends=('xdg-desktop-portal: file picker / opening links'
    
      10            'gnome-keyring: save credentials')
    
      11options=('!strip')
    
      12
    
      13_installdir=/opt/jayjay
    
      14
    
      15source_x86_64=("jayjay-gpui-x86_64.AppImage::https://github.com/hewigovens/jayjay/releases/download/v${pkgver}/jayjay-gpui-x86_64.AppImage")
    
      16source_aarch64=("jayjay-gpui-aarch64.AppImage::https://github.com/hewigovens/jayjay/releases/download/v${pkgver}/jayjay-gpui-aarch64.AppImage")
    
      17noextract=("jayjay-gpui-${CARCH}.AppImage")
    
      18sha256sums_x86_64=('8347966c575bc70b662063b0b0421ab8ce179941de65a9620b25d4baa30fe807')
    
      19sha256sums_aarch64=('a03ae3db5c0e2853d9406f67caca2b6d0f9c5f59c5aee7714ccaa29eb64f51ad')
    
      20
    
      21prepare() {
    
      22  local _appimage="jayjay-gpui-${CARCH}.AppImage"
    
      23  chmod a+x "${_appimage}"
    
      24  ./"${_appimage}" --appimage-extract >/dev/null
    
      25  sed -i \
    
      26    -e "s+^Exec=jayjay-gpui+Exec=${_installdir}/JayJay.AppImage+" \
    
      27    -e "s+^Icon=.*+Icon=/usr/share/icons/hicolor/scalable/apps/dev.hewig.JayJay.svg+" \
    
      28    squashfs-root/dev.hewig.JayJay.desktop
    
      29}
    
      30
    
      31package() {
    
      32  local _appimage="jayjay-gpui-${CARCH}.AppImage"
    
      33  install -Dm755 "${_appimage}" "${pkgdir}${_installdir}/JayJay.AppImage"
    
      34  install -Dm644 squashfs-root/dev.hewig.JayJay.desktop \
    
      35    "${pkgdir}/usr/share/applications/dev.hewig.JayJay.desktop"
    
      36  install -Dm644 squashfs-root/usr/share/icons/hicolor/scalable/apps/dev.hewig.JayJay.svg \
    
      37    "${pkgdir}/usr/share/icons/hicolor/scalable/apps/dev.hewig.JayJay.svg"
    
      38}
    
      39

Changes since previous scan

--- PKGBUILD @ 2026-10-23 03:36
+++ PKGBUILD @ 2026-10-23 05:36
@@ -1,20 +1,22 @@
 pkgname=jayjay-appimage
 pkgver=0.3.20
-pkgrel=1
+pkgrel=2
 pkgdesc='Native desktop client for Jujutsu version control'
-arch=('x86_64')
+arch=('x86_64' 'aarch64')
 url='https://jayjay.hewig.dev/'
 license=('BUSL-1.1')
-depends=('fontconfig' 'fuse2' 'gcc-libs' 'vulkan-driver' 'vulkan-icd-loader' 'wayland' 'xdg-utils')
+depends=('fontconfig' 'fuse2' 'gcc-libs' 'libxcb' 'vulkan-driver' 'vulkan-icd-loader' 'wayland' 'xdg-utils')
 optdepends=('xdg-desktop-portal: file picker / opening links'
             'gnome-keyring: save credentials')
 options=('!strip')
 
 _installdir=/opt/jayjay
 
-source=("jayjay-gpui-${CARCH}.AppImage::https://github.com/hewigovens/jayjay/releases/download/v${pkgver}/jayjay-gpui-${CARCH}.AppImage")
+source_x86_64=("jayjay-gpui-x86_64.AppImage::https://github.com/hewigovens/jayjay/releases/download/v${pkgver}/jayjay-gpui-x86_64.AppImage")
+source_aarch64=("jayjay-gpui-aarch64.AppImage::https://github.com/hewigovens/jayjay/releases/download/v${pkgver}/jayjay-gpui-aarch64.AppImage")
 noextract=("jayjay-gpui-${CARCH}.AppImage")
-sha256sums=('8347966c575bc70b662063b0b0421ab8ce179941de65a9620b25d4baa30fe807')
+sha256sums_x86_64=('8347966c575bc70b662063b0b0421ab8ce179941de65a9620b25d4baa30fe807')
+sha256sums_aarch64=('a03ae3db5c0e2853d9406f67caca2b6d0f9c5f59c5aee7714ccaa29eb64f51ad')
 
 prepare() {
   local _appimage="jayjay-gpui-${CARCH}.AppImage"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-23 05:36:55	Low	2
2026-10-23 03:36:21	Low	2