kairo-git

LOW
maintainer nihitdev 0 votes scanned 2026-09-04 15:58:02.366786
View on AUR
Why flagged

The package builds from the project's own Git repository, installs only scripts and configuration files, and does not execute remote code or download unverified binaries; the low severity is due to few votes and recent upload, not inherent risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own Git repository, installs only scripts and configuration files, and does not execute remote code or download unverified binaries; the low severity is due to few votes and recent upload, not inherent risk.

PKGBUILD

1# Maintainer: Kairo contributors
2pkgname=kairo-git
3pkgver=0.1.0.r1.gunknown
4pkgrel=1
5pkgdesc='Safe, interactive Arch workstation installer and curated Wayland dotfiles'
6arch=(any)
7url='https://github.com/nihitdev/kairo'
8license=(MIT)
9depends=(bash git)
10optdepends=(
11 'hyprland: Hyprland compositor configuration'
12 'kitty: terminal configuration'
13 'rofi-wayland: launcher and menu configuration'
14 'waybar: status bar configuration'
15 'quickshell: Kairo desktop shell runtime'
16)
17provides=(kairo)
18conflicts=(kairo)
19source=("git+$url.git#branch=main")
20b2sums=('SKIP')
21
22pkgver() {
23 cd kairo
24 printf '0.1.0.r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
25}
26
27package() {
28 cd kairo
29 install -Dm755 install.sh "$pkgdir/usr/share/kairo/install.sh"
30 cp -a .config shell README.md LICENSE "$pkgdir/usr/share/kairo/"
31 install -d "$pkgdir/usr/bin"
32 cat > "$pkgdir/usr/bin/kairo" <<'EOF'
33#!/usr/bin/env bash
34exec bash /usr/share/kairo/install.sh "$@"
35EOF
36 chmod 755 "$pkgdir/usr/bin/kairo"
37}
38

Scan history

Scanned at (UTC)SeverityRules
2026-09-04 15:58:02 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion