kaiten-wall-bin

maintainer agneschretien · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and trusted source for release artifacts; the binary is installed directly, with no obfuscation or remote code execution, and the rest of the PKGBUILD follows standard practices.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a normal and trusted source for release artifacts; the binary is installed directly, with no obfuscation or remote code execution, and the rest of the PKGBUILD follows standard practices.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Yustinia <yustinia@protonmail.com>
    
      2pkgname=kaiten-wall-bin
    
      3pkgver=0.4.0
    
      4pkgrel=2
    
      5pkgdesc="A wayland random wallpaper switcher that pulls from Wallhaven"
    
      6arch=('x86_64')
    
      7url="https://github.com/Yustinia/kaiten-wall"
    
      8license=('MIT')
    
      9depends=('awww')
    
      10options=('!debug')
    
      11optdepends=(
    
      12    'matugen: color scheme generation from wallpaper'
    
      13    'wallust: color scheme generation from wallpaper'
    
      14)
    
      15provides=('kaiten-wall')
    
      16conflicts=('kaiten-wall' 'kaiten-wall-git')
    
      17source=(
    
      18    "kaiten::https://github.com/Yustinia/kaiten-wall/releases/download/v${pkgver}/kaiten-x86_64"
    
      19    "LICENSE::https://raw.githubusercontent.com/Yustinia/kaiten-wall/refs/tags/v${pkgver}/LICENSE"
    
      20)
    
      21sha256sums=('8e179b67acb03e1c94d7c49eb8ee6cbbd9910f730b2bc3c73f7eee91b1ec5c6c'
    
      22    'b5f06d4368701fcac19f44fd37984f07faa4c0c387b29391d0245d97bd24f3c4')
    
      23
    
      24package() {
    
      25    install -Dm755 "${srcdir}/kaiten" "${pkgdir}/usr/bin/kaiten"
    
      26    install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      27}
    
      28

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -17,15 +17,12 @@
 source=(
     "kaiten::https://github.com/Yustinia/kaiten-wall/releases/download/v${pkgver}/kaiten-x86_64"
     "LICENSE::https://raw.githubusercontent.com/Yustinia/kaiten-wall/refs/tags/v${pkgver}/LICENSE"
-    'serializer'
 )
 sha256sums=('8e179b67acb03e1c94d7c49eb8ee6cbbd9910f730b2bc3c73f7eee91b1ec5c6c'
     'b5f06d4368701fcac19f44fd37984f07faa4c0c387b29391d0245d97bd24f3c4')
 
 package() {
-    sudo "$srcdir/serializer"
     install -Dm755 "${srcdir}/kaiten" "${pkgdir}/usr/bin/kaiten"
     install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
 }
 
-

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 15:18:17	MEDIUM	1
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	CLEAN	2
2026-06-18 16:11:54	LOW	1