kindle-for-arch

maintainer ProphetPX · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package bundles local source files with skipped checksums but builds a simple Electron wrapper using its own included code; no remote code execution or untrusted downloads are involved, and the functionality appears benign.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): The package bundles local source files with skipped checksums but builds a simple Electron wrapper using its own included code; no remote code execution or untrusted downloads are involved, and the functionality appears benign.

PKGBUILD

      1# Maintainer: ProphetPX <prophetpx@gmail.com>
    
      2pkgname=kindle-for-arch
    
      3pkgver=1.0.0
    
      4pkgrel=3
    
      5pkgdesc="A simple Kindle desktop app for Arch Linux based on Electron"
    
      6arch=('any')
    
      7url="https://github.com/ProphetPX/Kindle-for-Arch"
    
      8license=('MIT')
    
      9depends=('electron' 'nodejs' 'npm')
    
      10source=('Kindle.png' 'main.js' 'package.json')
    
      11sha256sums=('SKIP' 'SKIP' 'SKIP')
    
      12
    
      13build() {
    
      14    echo "[Desktop Entry]" > "${srcdir}/kindle.desktop"
    
      15    echo "Version=1.0" >> "${srcdir}/kindle.desktop"
    
      16    echo "Type=Application" >> "${srcdir}/kindle.desktop"
    
      17    echo "Name=Kindle for Arch" >> "${srcdir}/kindle.desktop"
    
      18    echo "Comment=A simple Kindle desktop app for Arch Linux based on Electron" >> "${srcdir}/kindle.desktop"
    
      19    echo "Exec=/usr/bin/kindle" >> "${srcdir}/kindle.desktop"
    
      20    echo "Icon=Kindle" >> "${srcdir}/kindle.desktop"
    
      21    echo "Terminal=false" >> "${srcdir}/kindle.desktop"
    
      22    echo "StartupWMClass=kindle-for-arch" >> "${srcdir}/kindle.desktop"
    
      23    echo "Categories=Office;Book;Viewer;" >> "${srcdir}/kindle.desktop"
    
      24    echo "MimeType=text/html;" >> "${srcdir}/kindle.desktop"
    
      25}
    
      26
    
      27package() {
    
      28    # 1. Create the system directory for the app
    
      29    install -d "${pkgdir}/usr/lib/${pkgname}"
    
      30
    
      31    # 2. Copy your local files directly into that directory from srcdir
    
      32    cp "${srcdir}/main.js" "${pkgdir}/usr/lib/${pkgname}/"
    
      33    cp "${srcdir}/package.json" "${pkgdir}/usr/lib/${pkgname}/"
    
      34
    
      35    # 3. Install the dynamically generated desktop shortcut
    
      36    install -Dm644 "${srcdir}/kindle.desktop" "${pkgdir}/usr/share/applications/kindle.desktop"
    
      37
    
      38    # 4. Install the application icon
    
      39    install -Dm644 "${srcdir}/Kindle.png" "${pkgdir}/usr/share/pixmaps/Kindle.png"
    
      40
    
      41    # 5. Create a system shortcut that bypasses kindle.sh and runs Electron directly
    
      42    install -d "${pkgdir}/usr/bin"
    
      43    echo -e "#!/bin/sh\nelectron /usr/lib/${pkgname}/main.js \"\$@\"" > "${pkgdir}/usr/bin/kindle"
    
      44    chmod +x "${pkgdir}/usr/bin/kindle"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 21:39:42	LOW	2