kairo-git
The package builds from the project's own Git repository, installs only scripts and configuration files, and does not execute remote code or download unverified binaries; the low severity is due to few votes and recent upload, not inherent risk.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, installs only scripts and configuration files, and does not execute remote code or download unverified binaries; the low severity is due to few votes and recent upload, not inherent risk.
PKGBUILD
# Maintainer: Kairo contributors
pkgname=kairo-git
pkgver=0.1.0.r1.gunknown
pkgrel=1
pkgdesc='Safe, interactive Arch workstation installer and curated Wayland dotfiles'
arch=(any)
url='https://github.com/nihitdev/kairo'
license=(MIT)
depends=(bash git)
optdepends=(
'hyprland: Hyprland compositor configuration'
'kitty: terminal configuration'
'rofi-wayland: launcher and menu configuration'
'waybar: status bar configuration'
'quickshell: Kairo desktop shell runtime'
)
provides=(kairo)
conflicts=(kairo)
source=("git+$url.git#branch=main")
b2sums=('SKIP')
pkgver() {
cd kairo
printf '0.1.0.r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
}
package() {
cd kairo
install -Dm755 install.sh "$pkgdir/usr/share/kairo/install.sh"
cp -a .config shell README.md LICENSE "$pkgdir/usr/share/kairo/"
install -d "$pkgdir/usr/bin"
cat > "$pkgdir/usr/bin/kairo" <<'EOF'
#!/usr/bin/env bash
exec bash /usr/share/kairo/install.sh "$@"
EOF
chmod 755 "$pkgdir/usr/bin/kairo"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-04 15:58:02 | Low | 2 |