keyboard-app

maintainer zdislavaruzicka · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a verifiable source tarball hosted on GitHub with a valid checksum; the flagged pattern is based on package adoption history, not malicious content or untrusted code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a verifiable source tarball hosted on GitHub with a valid checksum; the flagged pattern is based on package adoption history, not malicious content or untrusted code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: Talha Altinel <talhaaltinel@hotmail.com>
    
      2
    
      3pkgname=keyboard-app
    
      4pkgver=0.4.0
    
      5pkgrel=2
    
      6pkgdesc="Universal on-screen keyboard"
    
      7arch=('x86_64')
    
      8url="https://github.com/occamist/keyboard-app"
    
      9license=('MIT')
    
      10depends=('cairo' 'desktop-file-utils' 'gcc-libs' 'gdk-pixbuf2' 'glib2' 'glibc' 'gtk3' 'hicolor-icon-theme' 'libsoup3' 'pango' 'webkit2gtk-4.1')
    
      11makedepends=('git' 'openssl' 'appmenu-gtk-module' 'libappindicator-gtk3' 'librsvg' 'cargo' 'pnpm' 'nodejs')
    
      12source=("${pkgname}-${pkgver}.tar.gz::https://github.com/occamist/keyboard-app/archive/v${pkgver}.tar.gz")
    
      13sha256sums=('510d71ae5b388ece141dea651e0e7b265a38baefe5c096c136b987b654029691')
    
      14_commit=('8e175a25396441a628480e55a53df2bfaee37f2e')
    
      15
    
      16build() {
    
      17  cd "$pkgname-$pkgver"
    
      18  
    
      19  pnpm install
    
      20  pnpm tauri build -b deb
    
      21}
    
      22
    
      23package() {
    
      24  cp -a ${pkgname}-${pkgver}/src-tauri/target/release/bundle/deb/${pkgname}_${pkgver}_*/data/* "${pkgdir}"
    
      25
    
      26  cd "$pkgname-$pkgver"
    
      27  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      28}
    
      29
    
      30

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 17:15:21	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0